Edit tour

Windows Analysis Report
Setup.exe

Overview

General Information

Sample name:	Setup.exe
Analysis ID:	1587713
MD5:	9ef1c049702436c2597449bfb966130e
SHA1:	59218c019d0f5393e90564c4a4489b707d3b7caf
SHA256:	500120d7f112716a9b0bcab569ed5c480b694641e604f6df9da264249bf8f2ff
Infos:

Detection

Score:	42
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Compliance

Score:	35
Range:	0 - 100

Signatures

Multi AV Scanner detection for dropped file

Creates multiple autostart registry keys

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

AV process strings found (often used to terminate AV products)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected non-DNS traffic on DNS port

Drops PE files

EXE planting / hijacking vulnerabilities found

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a global mouse hook

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

May use bcdedit to modify the Windows boot settings

One or more processes crash

PE file contains an invalid checksum

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Classification

Process Tree

System is w11x64_office

Setup.exe (PID: 6844 cmdline: "C:\Users\user\Desktop\Setup.exe" MD5: 9EF1C049702436C2597449BFB966130E)

chrome.exe (PID: 912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pcapp.store/installing.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&winver=22631&version=fa.2002&nocache=20250110102314.55&_fcid=1736265551741605 MD5: 290DF23002E9B52249B5549F0C668A86)

chrome.exe (PID: 7004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=2160,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=2184 /prefetch:11 MD5: 290DF23002E9B52249B5549F0C668A86)

chrome.exe (PID: 3504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations=is-enterprise-managed=no --field-trial-handle=5452,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=5476 /prefetch:12 MD5: 290DF23002E9B52249B5549F0C668A86)

chrome.exe (PID: 5864 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=5428,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=5624 /prefetch:14 MD5: 290DF23002E9B52249B5549F0C668A86)

nsc5D64.tmp (PID: 6304 cmdline: "C:\Users\user\AppData\Local\Temp\nsc5D64.tmp" /internal 1736265551741605 /force MD5: FFF2189ADE42336854F53C8D2BD5A0E5)

PcAppStore.exe (PID: 6700 cmdline: "C:\Users\user\PCAppStore\PcAppStore.exe" /init default MD5: A4EA4FFE8FF33279682195AFC6CEBC70)

WerFault.exe (PID: 6304 cmdline: C:\Windows\system32\WerFault.exe -u -p 6700 -s 2692 MD5: 5A849C27C4796C1A7C22C572D8EAF95D)

Watchdog.exe (PID: 5460 cmdline: "C:\Users\user\PCAppStore\Watchdog.exe" /guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680 /rid=20250110102331.45217218 /ver=fa.2002 MD5: FCD21F8A189F9427083D19AD84FE7FF9)

cleanup

Sigma Signatures

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: "C:\Users\user\PCAppStore\PCAppStore.exe" /init default, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp, ProcessId: 6304, TargetObject: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\PCAppStore

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-10T16:23:33.494463+0100	2803304	3	Unknown Traffic	192.168.2.24	59137	167.99.235.203	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	ReversingLabs: Detection: 34%
Source: C:\Users\user\PCAppStore\Uninstaller.exe	ReversingLabs: Detection: 26%

Privilege Escalation

EXE planting / hijacking vulnerabilities found

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	EXE: C:\Users\user\PCAppStore\Watchdog.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	EXE: C:\Users\user\PCAppStore\PcAppStore.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	EXE: C:\Users\user\PCAppStore\Uninstaller.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	EXE: C:\Users\user\PCAppStore\AutoUpdater.exe	Jump to behavior

Phishing

Source: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002	HTTP Parser: No favicon
Source: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002	HTTP Parser: No favicon
Source: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002	HTTP Parser: No favicon
Source: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002	HTTP Parser: No favicon

Compliance

EXE planting / hijacking vulnerabilities found

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	EXE: C:\Users\user\PCAppStore\Watchdog.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	EXE: C:\Users\user\PCAppStore\PcAppStore.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	EXE: C:\Users\user\PCAppStore\Uninstaller.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	EXE: C:\Users\user\PCAppStore\AutoUpdater.exe	Jump to behavior

Uses 32bit PE files

Source: Setup.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Creates a software uninstall entry

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

Registry value created: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\PCAppStore

Jump to behavior

Creates license or readme file

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

File created: C:\Users\user\PCAppStore\ReadMe.txt

Jump to behavior

PE / OLE file has a valid certificate

Source: Setup.exe

Static PE information: certificate valid

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.24:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.24:59520 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.24:58978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.24:59069 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.24:59157 version: TLS 1.2

Contains modern PE file flags such as dynamic base (ASLR) or NX

Source: Setup.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Binary contains paths to debug symbols

Source:	Binary string: C:\Build\Build_2002_D20241129T170824\fa_rss\AppStoreUpdater\Release\auto_updater.pdb source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr
Source:	Binary string: C:\Build\Build_2002_D20241129T170824\fa_rss\AppStoreUpdater\Release\auto_updater.pdb1 source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr
Source:	Binary string: C:\Build\Build_2002_D20241129T170824\fa_rss\Watchdog\x64\Release\Watchdog.pdb source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000000.12853435244.00007FF6D9EFA000.00000002.00000001.01000000.00000017.sdmp, nsf72A0.tmp.10.dr, Watchdog.exe.10.dr
Source:	Binary string: C:\Users\zak\Downloads\Inetc\Unicode\Plugins\inetc.pdb source: Setup.exe, 00000001.00000002.12764759369.000000000040A000.00000004.00000001.01000000.00000003.sdmp, nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, inetc.dll.10.dr, nsf72A0.tmp.10.dr, inetc.dll.1.dr
Source:	Binary string: C:\Build\Build_2002_D20241129T170824\fa_rss\engine\Release\PCAppStore.pdb source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr

Networking

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.24:58976 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.24:59518 -> 1.1.1.1:53

HTTP GET or POST without a user agent

Source: global traffic	HTTP traffic detected: POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1736522579611&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1Accept-Encoding: gzip, deflateContent-Length: 2692Content-Type: application/json; charset=UTF-8Host: browser.events.data.msn.cnConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1736522591996&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1Accept-Encoding: gzip, deflateContent-Length: 4624Content-Type: application/json; charset=UTF-8Host: browser.events.data.msn.cnConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /api/pcapp_engine.php?a=config&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002 HTTP/1.1Host: pcapp.storeCache-Control: no-cache

IP address seen in connection with other malware

Source: Joe Sandbox View	IP Address: 18.173.205.91 18.173.205.91
Source: Joe Sandbox View	IP Address: 159.223.126.41 159.223.126.41
Source: Joe Sandbox View	IP Address: 167.99.235.203 167.99.235.203

JA3 SSL client fingerprint seen in connection with other malware

Source: Joe Sandbox View

JA3 fingerprint: 6a5d235ee78c6aede6a61448b4e9ff1e

Suricata IDS alerts with low severity for network traffic

Source: Network traffic

Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.24:59137 -> 167.99.235.203:443

Source: unknown	TCP traffic detected without corresponding DNS query: 4.209.164.61
Source: unknown	TCP traffic detected without corresponding DNS query: 4.209.164.61
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.209.135
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.227
Source: unknown	TCP traffic detected without corresponding DNS query: 23.209.209.135
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.227
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.126.37.201
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199

Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=show_page&p=wel&_fcid=1736265551741605 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /service/news/feed/pages/dashboard4?aver=1.1.200.0&over=10.0.22631.4169.amd64fre.ni_release.220506-1250&fring=Retail&devicetype=1&oem=VMware%2C%20Inc.&smode=false&machineId=%7BADA0F343-6E11-4C03-89DA-546517CD1A62%7D&clv=3.0&hver=524.30502.30.0&locale=en-US&region=CH&apikey=lxSNtibdZ45aPe8BHuUR6XwhuuruYfwejEYNpSqgcd&ocid=winp2widget&timeOut=2000&activityId=293baa31-2af8-4f1e-924e-413af5be3dea&user=m-14EA2E828C4D639509943BD28D2B6272&cm=de-ch&caller=bgtask&theme=light&nw=false&msrc=0&it=app&scn=al_app_anon&clientFeatures=1 HTTP/1.1Referer: https://windows.msn.com/Accept-Encoding: gzip, deflatemuid: 14EA2E828C4D639509943BD28D2B6272User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0Host: assets.msn.comConnection: Keep-AliveCookie: MUID=14EA2E828C4D639509943BD28D2B6272
Source: global traffic	HTTP traffic detected: GET /service/news/feed/pages/dashboard4?aver=1.1.200.0&over=10.0.22631.4169.amd64fre.ni_release.220506-1250&fring=Retail&devicetype=1&oem=VMware%2C%20Inc.&smode=false&machineId=%7BADA0F343-6E11-4C03-89DA-546517CD1A62%7D&clv=3.0&hver=524.30502.30.0&locale=en-US&region=CH&apikey=lxSNtibdZ45aPe8BHuUR6XwhuuruYfwejEYNpSqgcd&ocid=winp2widget&timeOut=2000&activityId=fde7885d-f607-4cc9-bdad-8f7a12df416a&user=m-14EA2E828C4D639509943BD28D2B6272&cm=de-ch&caller=retryBgFetch&theme=light&nw=false&msrc=0&it=app&scn=al_app_anon&clientFeatures=1 HTTP/1.1Referer: https://windows.msn.com/Accept-Encoding: gzip, deflatemuid: 14EA2E828C4D639509943BD28D2B6272User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0Host: assets.msn.comConnection: Keep-AliveCookie: MUID=14EA2E828C4D639509943BD28D2B6272
Source: global traffic	HTTP traffic detected: GET /weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/AAehR3S.png HTTP/1.1Accept: /Accept-Language: en-CH,en-US;q=0.7,en;q=0.3UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: assets.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /staticsb/statics/latest/icons-wc/icons/TrendingLight.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: 0x8DD160B390F1D29
Source: global traffic	HTTP traffic detected: GET /weathermapdata/1/static/weather/Icons/taskbar_v10/tempdrop1.svg HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; MUIDB=14EA2E828C4D639509943BD28D2B6272; USRLOC=
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/vendors.b540f4f9497b6ced4cf6.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/microsoft.5503fd0abb68caa4c2f5.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/common.c9e5ca54f8fe5dc7fd57.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/experience.59c10e5fb50b1cb7db86.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resolver/api/resolve/v3/config/?expType=AppConfig&expInstance=default&apptype=winWidgets&v=20250109.159&targetScope={%22audienceMode%22:%22adult%22,%22browser%22:{%22browserType%22:%22edgeChromium%22,%22version%22:%22100%22,%22ismobile%22:%22false%22},%22deviceFormFactor%22:%22desktop%22,%22domain%22:%22windows.msn.com%22,%22locale%22:{%22content%22:{%22language%22:%22de%22,%22market%22:%22ch%22},%22display%22:{%22language%22:%22en%22,%22market%22:%22us%22}},%22os%22:%22windows%22,%22platform%22:%22web%22,%22pageType%22:%22startfeed%22,%22pageExperiments%22:[%22prg-pr2-stalecontent%22,%22prg-pr2-trf-rhighimp%22]} HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://windows.msn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/common-segments.484c688f730e76f122fa.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/common-others.b1fdc7d281e36456e775.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/common-feed-libs.cad137bb0459e28c3b26.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/cs-core-desktop_card-components_dist_card-banner_index_js-cs-core-desktop_card-components_dis-9069ae.abf514e47605b1f8c4fc.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/libs_data-transformer-shared_dist_index_js-libs_money-info-loader_dist_index_js-libs_money-da-adb667.712127fe7f4ebc6b0c5f.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/money-info.c5ec602bd7f7b5dc3160.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/common-sports-lib.cf9f764561464dba4117.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/sports-info.f2b9f959af2e127821a1.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/libs_ad-service_dist_CookieConsentService_js-libs_ad-service_dist_CookieService_js-libs_ad-se-22340a.901222ed36abf8327ebb.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/experiences_pill-wc_dist_PillWC_config_js-libs_feed-layout_dist_layout-templates_template-map-61dac2.c26cc3e9f1d78405be3d.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/widgets-start-feed.8a3a9e79ea6f02f553b6.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/common-feed-libs.cad137bb0459e28c3b26.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/v1/winWidgets/latest/common-feed-libs.cad137bb0459e28c3b26.js HTTP/1.1Host: assets.msn.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100"Origin: https://windows.msn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://windows.msn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=show_page&p=installing&_fcid=1736265551741605 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=start&permision=&_fcid=1736265551741605 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=download_start&_fcid=1736265551741605 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /installing.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&winver=22631&version=fa.2002&nocache=20250110102314.55&_fcid=1736265551741605 HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /download.php?&src=mini_installer&file=1&mini_ver=fa.2002 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: delivery.pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 HTTP/1.1Host: pcapp.storeConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.css?nocache=1731594251558 HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /src/main.js HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.js?nocache=1731594251558 HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/front_img/logo/logo-dark.svg HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /src/main.js HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/logo/logo-dark.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=download_done&result=12345678-1234-5678-90AB-CDDEEFAABBCC&_fcid=1736265551741605 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.js?nocache=1731594251558 HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/lp/lpd_installing_r2/src/lpd_installing_r2.min.css?nocache=1731594251558Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1736522599729&cv=11&fst=1736522599729&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/858128210?random=1736522599729&cv=11&fst=1736522599729&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2024X-Browser-Validation: QFEz3B6Z4AT6PlLzuts1mBxQGCM=X-Browser-Copyright: Copyright 2024 Google LLC. All rights reserved.X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/858128210?random=1736522599765&cv=11&fst=1736522599765&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2024X-Browser-Validation: QFEz3B6Z4AT6PlLzuts1mBxQGCM=X-Browser-Copyright: Copyright 2024 Google LLC. All rights reserved.X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1736522599765&cv=11&fst=1736522599765&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-VFQWFX3X1C&gacid=1265177916.1736522600&gtm=45je5190v898645365za200zb9103256652&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1939852465 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2024X-Browser-Validation: QFEz3B6Z4AT6PlLzuts1mBxQGCM=X-Browser-Copyright: Copyright 2024 Google LLC. All rights reserved.X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1736522600079&cv=11&fst=1736522600079&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/858128210?random=1736522600079&cv=11&fst=1736522600079&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2024X-Browser-Validation: QFEz3B6Z4AT6PlLzuts1mBxQGCM=X-Browser-Copyright: Copyright 2024 Google LLC. All rights reserved.X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=done&_fcid=1736265551741605 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1736522599729&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dCYrGmA3j1ZBKci55HrLYuFxdZh93cw&random=3818507793&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-known/protected-auction/v1/public-keys HTTP/1.1Host: publickeyservice.pa.gcp.privacysandboxservices.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1736522599765&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dbYYVcUdpOA1RyOLC4CtfGhXeYBQlnw&random=1369019749&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1736522600079&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dQuWNPa2y5b_M9uxYCEXj8foOs-UXvg&random=2943291927&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_installer&evt_action=internal&prev_v=fa.2002 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /pixelgif.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /lp/appstore/img/favicon.ico HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/logo/logo-dark.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1736522599729&cv=11&fst=1736522599729&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1736522599765&cv=11&fst=1736522599765&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1736522599729&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dCYrGmA3j1ZBKci55HrLYuFxdZh93cw&random=3818507793&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1736522600079&cv=11&fst=1736522600079&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1736522599765&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dbYYVcUdpOA1RyOLC4CtfGhXeYBQlnw&random=1369019749&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1736522600079&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dQuWNPa2y5b_M9uxYCEXj8foOs-UXvg&random=2943291927&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0BSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_installer&evt_action=start&permision= HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_installer&evt_action=installing&e=03000200-0400-0500-0006-000700080009&u=74 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_installer&evt_action=localmac&addon[]=80-C1-6E-AA-B5-C8 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /lp/appstore/img/favicon.ico HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&inst_parent=&evt_src=fa_installer&evt_action=done HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":0,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736526543&nocache=20423 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_product&evt_action=channel&id=-3&eng_time=1736526543481&nocache=5217578 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /api/pcapp_engine.php?a=config&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002 HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":1,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736529061&nocache=24538 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_product&evt_action=started&prnt=nsc5D64.tmp&sys_lang=en-US&eng_time=1736526543517&nocache=5219859 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":2,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736530981&nocache=27676 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":3,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736533019&nocache=31007 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":4,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736535058&nocache=1570 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":5,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736537096&nocache=4900 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":6,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736539015&nocache=8035 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_product&evt_action=webview_error&reason=failed_to_create_thread_hook&eng_time=1736526545358&nocache=5221828 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":7,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736540934&nocache=11170 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":8,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736543212&nocache=14893 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":9,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736545131&nocache=18028 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":10,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736547170&nocache=21359 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":11,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736549088&nocache=24494 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":12,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736551007&nocache=27629 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":13,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736553286&nocache=31352 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":14,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736555205&nocache=1719 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":15,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736557603&nocache=5641 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":16,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736559522&nocache=8776 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive

Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_230.7.dr, chromecache_213.7.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Nk:function(){e=nb()},Kd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),QE=["www.youtube.com","www.youtube-nocookie.com"],RE,SE=!1; equals www.youtube.com (Youtube)
Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_223.7.dr, chromecache_230.7.dr, chromecache_222.7.dr, chromecache_213.7.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=vC(a,c,e);U(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return U(122),!0;if(d&&f){for(var m=yb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},yC=function(){var a=[],b=function(c){return bb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_230.7.dr, chromecache_213.7.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Kh:e,Ih:f,Jh:g,ri:k,si:m,bf:n,Mb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(aF(w,"iframe_api")\|\|aF(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!SE&&ZE(x[B],p.bf))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_223.7.dr, chromecache_222.7.dr	String found in binary or memory: return b}OE.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),QE=["www.youtube.com","www.youtube-nocookie.com"],RE,SE=!1; equals www.youtube.com (Youtube)
Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_223.7.dr, chromecache_230.7.dr, chromecache_222.7.dr, chromecache_213.7.dr	String found in binary or memory: var cE=function(a,b,c,d,e){var f=TB("fsl",c?"nv.mwt":"mwt",0),g;g=c?TB("fsl","nv.ids",[]):TB("fsl","ids",[]);if(!g.length)return!0;var k=YB(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);U(121);if(m==="https://www.facebook.com/tr/")return U(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!DA(k,FA(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: pcapp.store
Source: global traffic	DNS traffic detected: DNS query: delivery.pcapp.store
Source: global traffic	DNS traffic detected: DNS query: repository.pcapp.store
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: publickeyservice.pa.gcp.privacysandboxservices.com
Source: global traffic	DNS traffic detected: DNS query: publickeyservice.pa.aws.privacysandboxservices.com
Source: global traffic	DNS traffic detected: DNS query: d74queuslupub.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: windows.msn.com
Source: global traffic	DNS traffic detected: DNS query: universalstore.streaming.mediaservices.windows.net
Source: global traffic	DNS traffic detected: DNS query: assets.msn.com

Source: unknown	DoH DNS queries detected: name: windows.msn.com
Source: unknown	DoH DNS queries detected: name: universalstore.streaming.mediaservices.windows.net
Source: unknown	DoH DNS queries detected: name: assets.msn.com

Source: unknown

HTTP traffic detected: POST /inst_cpg.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&version=fa.2002&src=pcapp_mini&uc=16le HTTP/1.1Content-Type: application/jsonUser-Agent: NSIS_wininetHost: pcapp.storeContent-Length: 4648Cache-Control: no-cache

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 15:23:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 15:23:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 15:23:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 15:23:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 15:23:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 15:23:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 15:23:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 10 Jan 2025 15:23:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding

Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Setup.exe, 00000001.00000002.12767899590.0000000002B4D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000003.11857560458.0000000002B3C000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000003.12865955826.000000000074A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.0000023144000000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.13066141763.0000026CA0374000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12884428492.0000026CA034B000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000002.13096900000.0000026CA0374000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12929458501.0000026CA0370000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12968213691.0000026CA0373000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12996606992.0000026CA0374000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Watchdog.exe.10.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: Setup.exe, nsc5D64.tmp.1.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr	String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: Amcache.hve.23.dr	String found in binary or memory: http://upx.sf.net
Source: Setup.exe, PcAppStore.exe.10.dr, nsc5D64.tmp.1.dr, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr, Watchdog.exe.10.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: chromecache_213.7.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_223.7.dr, chromecache_230.7.dr, chromecache_222.7.dr, chromecache_213.7.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: Watchdog.exe, 0000000E.00000002.13096900000.0000026CA0329000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000002.13103061949.0000026CA202E000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12969509433.0000026CA0318000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.13069487150.0000026CA0325000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d74queuslupub.cloudfront.net/
Source: Watchdog.exe, 0000000E.00000002.13096900000.0000026CA0329000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12969509433.0000026CA0318000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.13069487150.0000026CA0325000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d74queuslupub.cloudfront.net//as
Source: Watchdog.exe, 0000000E.00000002.13103061949.0000026CA202E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d74queuslupub.cloudfront.net/2
Source: Watchdog.exe, 0000000E.00000002.13103061949.0000026CA202E000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12969509433.0000026CA0318000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d74queuslupub.cloudfront.net/AppData
Source: Watchdog.exe, 0000000E.00000003.13069487150.0000026CA032C000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000002.13096900000.0000026CA032C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d74queuslupub.cloudfront.net/RfW
Source: Watchdog.exe, 0000000E.00000003.13069487150.0000026CA032C000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000002.13096900000.0000026CA032C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d74queuslupub.cloudfront.net/de
Source: Watchdog.exe, 0000000E.00000003.13069487150.0000026CA032C000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000002.13096900000.0000026CA032C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d74queuslupub.cloudfront.net/ft
Source: Watchdog.exe, 0000000E.00000003.12929458501.0000026CA034B000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000002.13104904853.00007FF6D9EFA000.00000002.00000001.01000000.00000017.sdmp, nsf72A0.tmp.10.dr, Watchdog.exe.10.dr	String found in binary or memory: https://d74queuslupub.cloudfront.net/p.gif?guid=%ws&version=%ws&evt_src=watch_dog&evt_action=signal_
Source: Watchdog.exe, 0000000E.00000003.13069487150.0000026CA0337000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002
Source: Watchdog.exe, 0000000E.00000003.12969509433.0000026CA0318000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d74queuslupub.cloudfront.net/soft
Source: Setup.exe, 00000001.00000003.12759511491.0000000002BA2000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000002.12769429421.0000000002BA3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delivery.pcapp.store/
Source: Setup.exe, 00000001.00000002.12765631606.00000000006B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=&evt_src=fa_mini_insta
Source: Setup.exe, 00000001.00000002.12764759369.0000000000436000.00000004.00000001.01000000.00000003.sdmp	String found in binary or memory: https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=ersion=fa.2002&src=pca
Source: Setup.exe, 00000001.00000003.12759115203.000000000074F000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000003.12759511491.0000000002B92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=fa.2002
Source: Setup.exe, 00000001.00000003.12759115203.000000000074F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=fa.2002h
Source: Setup.exe, 00000001.00000003.12759511491.0000000002BA2000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000002.12769429421.0000000002BA3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delivery.pcapp.store/r
Source: chromecache_234.7.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2)
Source: chromecache_234.7.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2)
Source: chromecache_234.7.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2)
Source: chromecache_234.7.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2)
Source: chromecache_234.7.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2)
Source: chromecache_234.7.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2)
Source: chromecache_234.7.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2)
Source: chromecache_213.7.dr	String found in binary or memory: https://google.com
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://google.comlast_v=%ws&dl_lnk=%wsempty_instructionsno_internet_connectionend
Source: chromecache_213.7.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: Watchdog.exe, 0000000E.00000003.12969509433.0000026CA0318000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000002.13096900000.0000026CA0330000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: chromecache_213.7.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_223.7.dr, chromecache_230.7.dr, chromecache_222.7.dr, chromecache_213.7.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store%02Xunknown
Source: Setup.exe, 00000001.00000003.12685480349.0000000002B96000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000002.12767899590.0000000002B10000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000003.12759511491.0000000002B92000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12875692795.0000000004220000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12875692795.0000000004274000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000003.12865955826.000000000074A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.000002314206E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12974465470.00007FF69A1CA000.00000004.00000001.01000000.00000016.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.0000023144082000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000003.12873093781.0000023142048000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.000002314200C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/
Source: Setup.exe, 00000001.00000003.12759511491.0000000002B92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/-end-point:
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144093000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//app
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144093000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//app0
Source: PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-hint/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002
Source: PcAppStore.exe, 0000000D.00000002.12966151524.0000023142085000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-hint/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.20022
Source: PcAppStore.exe, 0000000D.00000002.12966151524.0000023142085000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.20022
Source: PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002U
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144082000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-settings/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002DX
Source: PcAppStore.exe, 0000000D.00000002.12966151524.0000023142085000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-settings/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002n=f
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144082000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.00000231420CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-widget/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&id=73273&version=fa.
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144082000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.00000231420CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-widget/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&id=73412&version=fa.
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144093000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//ima
Source: PcAppStore.exe, 0000000D.00000002.12966151524.000002314206E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.png
Source: PcAppStore.exe, 0000000D.00000002.12966151524.000002314206E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.pngE
Source: PcAppStore.exe, 0000000D.00000002.12966151524.0000023142085000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.pngpp.store
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//search-menu/?a=getTemplate&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&p
Source: PcAppStore.exe, 0000000D.00000002.12966151524.000002314207A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.00000231420B2000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.js
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.js
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144093000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.js:false
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js#-
Source: PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.jsappOffer.jP
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.jsu.js
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.js
Source: PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.jsarchMJX
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSettings.js%-
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSettings.jsJT
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSettings.jsW.
Source: PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSettings.jss
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appStore.js
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144093000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.js
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.js1
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWindow.js
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144093000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWindow.js1
Source: PcAppStore.exe, 0000000D.00000002.12966151524.00000231420BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWindow.js6U%
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, nsf72A0.tmp.10.dr, ReadMe.txt.10.dr	String found in binary or memory: https://pcapp.store/?p=lpd_appstore-faq
Source: PcAppStore.exe, 0000000D.00000003.12873093781.0000023142048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/G
Source: PcAppStore.exe, 0000000D.00000002.12966151524.000002314200C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/K
Source: Setup.exe, 00000001.00000002.12767899590.0000000002B10000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/M
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144082000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/QRJ
Source: nsc5D64.tmp, 0000000A.00000003.12865955826.000000000074A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/T
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144082000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/ZF1whX
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/account/logintray_exitx
Source: PcAppStore.exe, 0000000D.00000003.12873093781.0000023142048000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000003.12873093781.00000231420B1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.0000023142085000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/api/pcapp_engine.php?a=config&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=
Source: Setup.exe, 00000001.00000003.12675281886.0000000000750000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/ata
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/cpg_fa.php?guid=An
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/dl_cta_open.php?guid=%ws&id=%lu&type=%ws
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/dl_cta_open.php?guid=%ws&oid=%lu&entryApp=%ws
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/fa_version.php?guid=%ws&end_v=%ws&nocache=%d
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/fa_version.php?guid=%ws&res=link&nocache=%d
Source: nsc5D64.tmp, 0000000A.00000002.12868212212.00000000006E5000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026BF000.00000004.00000020.00020000.00000000.sdmp, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/inst_cpg.php?guid=&src=pcapp_full.
Source: Setup.exe, 00000001.00000002.12767899590.0000000002B10000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/inst_cpg.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&ve
Source: nsc5D64.tmp, 0000000A.00000002.12875692795.0000000004220000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/inst_cpg.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&src=pcapp
Source: Setup.exe, 00000001.00000003.12685172585.0000000000747000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/installing.php?guid=
Source: Setup.exe, 00000001.00000002.12765631606.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12868212212.00000000006E5000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026BF000.00000004.00000020.00020000.00000000.sdmp, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/installing.php?guid=&winver=
Source: Setup.exe, 00000001.00000003.12759511491.0000000002B92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/installing.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&winver=22631&version=fa
Source: nsc5D64.tmp, 0000000A.00000003.12781184078.0000000004228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/n
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/notify_app_v2.php?guid=&lastid=&lasttime=&nocache=&end_v=%ws%ws%ws%d%ws%d%ws%ws%
Source: Setup.exe, 00000001.00000003.12685172585.0000000000747000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=
Source: nsc5D64.tmp, 0000000A.00000002.12868212212.00000000006E5000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026BF000.00000004.00000020.00020000.00000000.sdmp, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/pixel.gif?guid=&version=&evt_src=fa_installer&evt_action=localmac
Source: nsc5D64.tmp, 0000000A.00000002.12868878508.000000000078E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_i
Source: Setup.exe, 00000001.00000003.12759511491.0000000002B92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_m
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144093000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.00000231440B8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.0000023144000000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000003.12873093781.00000231420B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_p
Source: nsc5D64.tmp, 0000000A.00000003.12865955826.000000000074A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&inst_parent=
Source: PcAppStore.exe, 0000000D.00000002.12969939231.00000231440A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43:
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/pixel.gifC:
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/pixel.gifcurrent_path()
Source: nsc5D64.tmp, 0000000A.00000002.12868212212.00000000006E5000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026BF000.00000004.00000020.00020000.00000000.sdmp, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/privacy.html?guid=By
Source: Setup.exe, 00000001.00000002.12765631606.00000000006B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/privacy.html?guid=welhttps://pcapp.store/pixel.gif?guid=&version=&evt_src=fa_min
Source: nsc5D64.tmp, 0000000A.00000002.12875692795.0000000004274000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/s
Source: Setup.exe, 00000001.00000002.12765631606.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12868212212.00000000006E5000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026BF000.00000004.00000020.00020000.00000000.sdmp, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/tos.html?guid=
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcapp.store/wgetenv_errorUSERPROFILETemp
Source: PcAppStore.exe, 0000000D.00000002.12966151524.000002314200C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/x
Source: PcAppStore.exe, 0000000D.00000002.12969939231.00000231440AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store:443
Source: PcAppStore.exe, 0000000D.00000002.12969939231.00000231440A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store:443/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&
Source: PcAppStore.exe, 0000000D.00000002.12969939231.00000231440A5000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000003.12873093781.0000023142048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store:443/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=
Source: PcAppStore.exe, 0000000D.00000002.12969939231.00000231440AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store:443i
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://pcappstore.s3.amazonaws.com/versionrinstruction_failed%ws?guid=%ws&nocache=%dauto_updater.ex
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	String found in binary or memory: https://search.pcapp.store/r.html?q=%ws&br=%ws&en=%ws&guid=%ws&end_v=%ws
Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_230.7.dr, chromecache_213.7.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_223.7.dr, chromecache_230.7.dr, chromecache_222.7.dr, chromecache_213.7.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_213.7.dr	String found in binary or memory: https://www.google.com
Source: chromecache_238.7.dr, chromecache_219.7.dr, chromecache_233.7.dr, chromecache_236.7.dr, chromecache_215.7.dr, chromecache_235.7.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/858128210/?random
Source: chromecache_213.7.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_213.7.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_223.7.dr, chromecache_230.7.dr, chromecache_222.7.dr, chromecache_213.7.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_223.7.dr, chromecache_230.7.dr, chromecache_222.7.dr, chromecache_213.7.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_230.7.dr, chromecache_213.7.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_228.7.dr, chromecache_237.7.dr, chromecache_230.7.dr, chromecache_213.7.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 59076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 59070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59100
Source: unknown	Network traffic detected: HTTP traffic on port 59081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59079
Source: unknown	Network traffic detected: HTTP traffic on port 59172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59078
Source: unknown	Network traffic detected: HTTP traffic on port 59166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59072
Source: unknown	Network traffic detected: HTTP traffic on port 59128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59074
Source: unknown	Network traffic detected: HTTP traffic on port 58978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59070
Source: unknown	Network traffic detected: HTTP traffic on port 59000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59523
Source: unknown	Network traffic detected: HTTP traffic on port 59039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59084
Source: unknown	Network traffic detected: HTTP traffic on port 59045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59081
Source: unknown	Network traffic detected: HTTP traffic on port 59074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59098
Source: unknown	Network traffic detected: HTTP traffic on port 59017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59094
Source: unknown	Network traffic detected: HTTP traffic on port 59080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 59023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 59100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58978
Source: unknown	Network traffic detected: HTTP traffic on port 59091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59036
Source: unknown	Network traffic detected: HTTP traffic on port 59038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58980
Source: unknown	Network traffic detected: HTTP traffic on port 59015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59035
Source: unknown	Network traffic detected: HTTP traffic on port 59147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59155
Source: unknown	Network traffic detected: HTTP traffic on port 59044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59151
Source: unknown	Network traffic detected: HTTP traffic on port 59101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59048
Source: unknown	Network traffic detected: HTTP traffic on port 59062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59047
Source: unknown	Network traffic detected: HTTP traffic on port 59171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59045
Source: unknown	Network traffic detected: HTTP traffic on port 59165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59166
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59160
Source: unknown	Network traffic detected: HTTP traffic on port 58979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59163
Source: unknown	Network traffic detected: HTTP traffic on port 59010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59162
Source: unknown	Network traffic detected: HTTP traffic on port 58996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58996
Source: unknown	Network traffic detected: HTTP traffic on port 59078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58999
Source: unknown	Network traffic detected: HTTP traffic on port 59097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59059
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59050
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59174
Source: unknown	Network traffic detected: HTTP traffic on port 59141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49673
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59066
Source: unknown	Network traffic detected: HTTP traffic on port 59118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59186
Source: unknown	Network traffic detected: HTTP traffic on port 59016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59183
Source: unknown	Network traffic detected: HTTP traffic on port 59177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59181
Source: unknown	Network traffic detected: HTTP traffic on port 59089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59180
Source: unknown	Network traffic detected: HTTP traffic on port 58998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59109
Source: unknown	Network traffic detected: HTTP traffic on port 58981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59110
Source: unknown	Network traffic detected: HTTP traffic on port 59143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59111
Source: unknown	Network traffic detected: HTTP traffic on port 59186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59118
Source: unknown	Network traffic detected: HTTP traffic on port 59077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59117
Source: unknown	Network traffic detected: HTTP traffic on port 59098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59003
Source: unknown	Network traffic detected: HTTP traffic on port 59014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59002
Source: unknown	Network traffic detected: HTTP traffic on port 59175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59001
Source: unknown	Network traffic detected: HTTP traffic on port 59066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59129
Source: unknown	Network traffic detected: HTTP traffic on port 59131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59017
Source: unknown	Network traffic detected: HTTP traffic on port 59119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59016
Source: unknown	Network traffic detected: HTTP traffic on port 59065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59133
Source: unknown	Network traffic detected: HTTP traffic on port 59032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59130
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59139
Source: unknown	Network traffic detected: HTTP traffic on port 58980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59025
Source: unknown	Network traffic detected: HTTP traffic on port 59037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59024
Source: unknown	Network traffic detected: HTTP traffic on port 59043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59141
Source: unknown	Network traffic detected: HTTP traffic on port 59125 -> 443

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.24:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.24:59520 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.24:58978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.24:59069 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.24:59157 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Installs a global mouse hook

Source: C:\Users\user\PCAppStore\PcAppStore.exe

Windows user hook set: 0 mouse low level C:\Users\user\PCAppStore\PcAppStore.exe

Jump to behavior

System Summary

One or more processes crash

Source: C:\Users\user\PCAppStore\PcAppStore.exe

Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 6700 -s 2692

Sample file is different than original file name gathered from version info

Source: Setup.exe, 00000001.00000002.12764759369.000000000040A000.00000004.00000001.01000000.00000003.sdmp

Binary or memory string: OriginalFilenameinetc.dllF vs Setup.exe

Uses 32bit PE files

Source: Setup.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: classification engine

Classification label: mal42.evad.winEXE@28/94@36/17

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

File created: C:\Users\user\PCAppStore

Jump to behavior

Source: C:\Windows\System32\WerFault.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess6700

Source: C:\Users\user\Desktop\Setup.exe

File created: C:\Users\user\AppData\Local\Temp\nsjB9D.tmp

Jump to behavior

Source: Setup.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Name from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select MaxClockSpeed from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfCores from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfLogicalProcessors from Win32_Processor

Source: C:\Users\user\Desktop\Setup.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: SELECT sql FROM%d UNION ALL SELECT shell_add_schema(sql,mainNULL,name) AS sql, type, tbl_name, name, rowid, AS snum, AS sname FROM .sqlite_schema UNION ALL SELECT shell_module_schema(name), 'table', name, name, name, 9e+99, 'main' FROM pragma_module_list) WHERE %Qlower(printf('%s.%s',sname,tbl_name))lower(tbl_name) GLOB LIKE ESCAPE '\' AND name NOT LIKE 'sqlite_%%' AND sql IS NOT NULL ORDER BY snum, rowidSQL: %s;
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: INSERT INTO sqlite_schema(type,name,tbl_name,rootpage,sql)VALUES('table','%q','%q',0,'%q');%s
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: SELECT max(length(key)) FROM temp.sqlite_parameters;
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: CREATE TABLE ColNames( cpos INTEGER PRIMARY KEY, name TEXT, nlen INT, chop INT, reps INT, suff TEXT);CREATE VIEW RepeatedNames AS SELECT DISTINCT t.name FROM ColNames t WHERE t.name COLLATE NOCASE IN ( SELECT o.name FROM ColNames o WHERE o.cpos<>t.cpos);
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: SELECT type,name,tbl_name,sql FROM sqlite_schema ORDER BY name;
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: SELECT key, quote(value) FROM temp.sqlite_parameters;
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: SELECT 'CREATE TEMP' \|\| substr(sql, 7) FROM sqlite_schema WHERE tbl_name = %Q AND type IN ('table', 'trigger') ORDER BY type;
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: INSERT INTO selftest(tno,op,cmd,ans) SELECT rowid*10,op,cmd,ans FROM [_shell$self];
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: SELECT * FROM "%w" ORDER BY rowid DESC;Warning: cannot step "%s" backwardsSELECT name, sql FROM sqlite_schema WHERE %sError: (%d) %s on [%s]
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: INSERT INTO sqlite_schema(type,name,tbl_name,rootpage,sql)VALUES('table','%q','%q',0,'%q');
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: SELECT * FROM "%w" ORDER BY rowid DESC;
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: SELECT tbl,idx,stat FROM sqlite_stat1 ORDER BY tbl,idx;
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: SELECT 'EXPLAIN QUERY PLAN SELECT 1 FROM ' \|\| quote(s.name) \|\| ' WHERE ' \|\| group_concat(quote(s.name) \|\| '.' \|\| quote(f.[from]) \|\| '=?' \|\| fkey_collate_clause( f.[table], COALESCE(f.[to], p.[name]), s.name, f.[from]),' AND '), 'SEARCH ' \|\| s.name \|\| ' USING COVERING INDEX(' \|\| group_concat('=?', ' AND ') \|\| ')', s.name \|\| '(' \|\| group_concat(f.[from], ', ') \|\| ')', f.[table] \|\| '(' \|\| group_concat(COALESCE(f.[to], p.[name])) \|\| ')', 'CREATE INDEX ' \|\| quote(s.name \|\|'_'\|\| group_concat(f.[from], '_')) \|\| ' ON ' \|\| quote(s.name) \|\| '(' \|\| group_concat(quote(f.[from]) \|\| fkey_collate_clause( f.[table], COALESCE(f.[to], p.[name]), s.name, f.[from]), ', ') \|\| ');', f.[table] FROM sqlite_schema AS s, pragma_foreign_key_list(s.name) AS f LEFT JOIN pragma_table_info AS p ON (pk-1=seq AND p.arg=f.[table]) GROUP BY s.name, f.id ORDER BY (CASE WHEN ? THEN f.[table] ELSE s.name END)
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: SELECT 'CREATE TEMP' \|\| substr(sql, 7) FROM sqlite_schema WHERE tbl_name = %Q AND type IN ('table', 'trigger') ORDER BY type;ALTER TABLE temp.%Q RENAME TO %QINSERT INTO %Q VALUES(, %s?)UPDATE %Q SET , %s%Q=?DELETE FROM %QSELECT type, name, sql, 1 FROM sqlite_schema WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' UNION ALL SELECT type, name, sql, 2 FROM sqlite_schema WHERE type = 'trigger' AND tbl_name IN(SELECT name FROM sqlite_schema WHERE type = 'view') ORDER BY 4, 1CREATE TABLE x(, %s%Q COLLATE %s)CREATE VIRTUAL TABLE %Q USING expert(%Q)SELECT max(i.seqno) FROM sqlite_schema AS s, pragma_index_list(s.name) AS l, pragma_index_info(l.name) AS i WHERE s.type = 'table', %sx.%Q IS rem(%d, x.%Q) COLLATE %s%s%dSELECT %s FROM %Q x ORDER BY %sSELECT %s FROM temp.t592690916721053953805701627921227776 x ORDER BY %s%d %dDROP TABLE IF EXISTS temp.t592690916721053953805701627921227776CREATE TABLE temp.t592690916721053953805701627921227776 AS SELECT * FROM %QSELECT s.rowid, s.name, l.name FROM sqlite_schema AS s, pragma_index_list(s.name) AS l WHERE s.type = 'table'SELECT name, coll FROM pragma_index_xinfo(?) WHERE keyINSERT INTO sqlite_stat1 VALUES(?, ?, ?)ANALYZE; PRAGMA writable_schema=1remsampleDROP TABLE IF EXISTS temp.t592690916721053953805701627921227776ANALYZE sqlite_schemaDROP TABLE IF EXISTS temp.t592690916721053953805701627921227776:memory::memory:SELECT sql FROM sqlite_schema WHERE name NOT LIKE 'sqlite_%%' AND sql NOT LIKE 'CREATE VIRTUAL %%'Cannot find a unique index name to propose. -- stat1: %s;%s%s
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: INSERT OR IGNORE INTO "%s" VALUES(?,?);Error %d: %s on [%s]
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12852114840.00007FF69A1A7000.00000008.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: SELECT name,seq FROM sqlite_sequence ORDER BY name;

Source: C:\Users\user\Desktop\Setup.exe

File read: C:\Users\user\Desktop\Setup.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Setup.exe "C:\Users\user\Desktop\Setup.exe"
Source: C:\Users\user\Desktop\Setup.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pcapp.store/installing.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&winver=22631&version=fa.2002&nocache=20250110102314.55&_fcid=1736265551741605
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=2160,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=2184 /prefetch:11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations=is-enterprise-managed=no --field-trial-handle=5452,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=5476 /prefetch:12
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=5428,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=5624 /prefetch:14
Source: C:\Users\user\Desktop\Setup.exe	Process created: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp "C:\Users\user\AppData\Local\Temp\nsc5D64.tmp" /internal 1736265551741605 /force
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process created: C:\Users\user\PCAppStore\PcAppStore.exe "C:\Users\user\PCAppStore\PcAppStore.exe" /init default
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process created: C:\Users\user\PCAppStore\Watchdog.exe "C:\Users\user\PCAppStore\Watchdog.exe" /guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680 /rid=20250110102331.45217218 /ver=fa.2002
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 6700 -s 2692
Source: C:\Users\user\Desktop\Setup.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pcapp.store/installing.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&winver=22631&version=fa.2002&nocache=20250110102314.55&_fcid=1736265551741605	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Process created: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp "C:\Users\user\AppData\Local\Temp\nsc5D64.tmp" /internal 1736265551741605 /force	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=2160,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=2184 /prefetch:11	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations=is-enterprise-managed=no --field-trial-handle=5452,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=5476 /prefetch:12	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=5428,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=5624 /prefetch:14	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process created: C:\Users\user\PCAppStore\PcAppStore.exe "C:\Users\user\PCAppStore\PcAppStore.exe" /init default	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process created: C:\Users\user\PCAppStore\Watchdog.exe "C:\Users\user\PCAppStore\Watchdog.exe" /guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680 /rid=20250110102331.45217218 /ver=fa.2002	Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: cfgmgr32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: windows.system.launcher.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: cfgmgr32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wlanapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: mobilenetworking.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: pcappdebugger.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: eventsviewer.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: eventsviewer.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: PC App Store.lnk.10.dr

LNK file: ..\..\..\..\..\..\PCAppStore\PcAppStore.exe

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Creates a software uninstall entry

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

Registry value created: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\PCAppStore

Jump to behavior

PE / OLE file has a valid certificate

Source: Setup.exe

Static PE information: certificate valid

Contains modern PE file flags such as dynamic base (ASLR) or NX

Source: Setup.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Binary contains paths to debug symbols

Source:	Binary string: C:\Build\Build_2002_D20241129T170824\fa_rss\AppStoreUpdater\Release\auto_updater.pdb source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr
Source:	Binary string: C:\Build\Build_2002_D20241129T170824\fa_rss\AppStoreUpdater\Release\auto_updater.pdb1 source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr
Source:	Binary string: C:\Build\Build_2002_D20241129T170824\fa_rss\Watchdog\x64\Release\Watchdog.pdb source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000000.12853435244.00007FF6D9EFA000.00000002.00000001.01000000.00000017.sdmp, nsf72A0.tmp.10.dr, Watchdog.exe.10.dr
Source:	Binary string: C:\Users\zak\Downloads\Inetc\Unicode\Plugins\inetc.pdb source: Setup.exe, 00000001.00000002.12764759369.000000000040A000.00000004.00000001.01000000.00000003.sdmp, nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, inetc.dll.10.dr, nsf72A0.tmp.10.dr, inetc.dll.1.dr
Source:	Binary string: C:\Build\Build_2002_D20241129T170824\fa_rss\engine\Release\PCAppStore.pdb source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr

Data Obfuscation

PE file contains an invalid checksum

Source: Setup.exe	Static PE information: real checksum: 0x34078 should be: 0x3ea11
Source: System.dll.1.dr	Static PE information: real checksum: 0x0 should be: 0x3d68
Source: nsJSON.dll.1.dr	Static PE information: real checksum: 0x0 should be: 0x6718
Source: Math.dll.10.dr	Static PE information: real checksum: 0x0 should be: 0x155a8
Source: inetc.dll.10.dr	Static PE information: real checksum: 0x0 should be: 0x13c41
Source: System.dll.10.dr	Static PE information: real checksum: 0x0 should be: 0x3d68
Source: nsJSON.dll.10.dr	Static PE information: real checksum: 0x0 should be: 0x6718
Source: inetc.dll.1.dr	Static PE information: real checksum: 0x0 should be: 0x13c41
Source: nsDialogs.dll.1.dr	Static PE information: real checksum: 0x0 should be: 0x2f9b
Source: NSISFastLib.dll.1.dr	Static PE information: real checksum: 0x0 should be: 0x30512
Source: NSISFastLib.dll.10.dr	Static PE information: real checksum: 0x0 should be: 0x30512

Persistence and Installation Behavior

Drops PE files

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	File created: C:\Users\user\PCAppStore\Watchdog.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\inetc.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	File created: C:\Users\user\AppData\Local\Temp\nsa731E.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\nsJSON.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	File created: C:\Users\user\AppData\Local\Temp\nsa731E.tmp\inetc.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	File created: C:\Users\user\PCAppStore\PcAppStore.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	File created: C:\Users\user\AppData\Local\Temp\nsa731E.tmp\Math.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	File created: C:\Users\user\AppData\Local\Temp\nsa731E.tmp\nsJSON.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	File created: C:\Users\user\AppData\Local\Temp\nsa731E.tmp\NSISFastLib.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	File created: C:\Users\user\PCAppStore\Uninstaller.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	File created: C:\Users\user\PCAppStore\AutoUpdater.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\NSISFastLib.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\nsDialogs.dll	Jump to dropped file

May use bcdedit to modify the Windows boot settings

Source: Amcache.hve.23.dr	Binary or memory string: bcdedit.exe\|ac227fd116781fea
Source: Amcache.hve.23.dr	Binary or memory string: c:\windows\system32\bcdedit.exe
Source: Amcache.hve.23.dr	Binary or memory string: bcdedit.exe

Creates license or readme file

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

File created: C:\Users\user\PCAppStore\ReadMe.txt

Jump to behavior

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run PcAppStoreUpdater	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Watchdog	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run PCAppStore	Jump to behavior

Stores files to the Windows start menu directory

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run PCAppStore	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run PCAppStore	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run PcAppStoreUpdater	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run PcAppStoreUpdater	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Watchdog	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Watchdog	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Source: C:\Users\user\Desktop\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Caption from Win32_DiskDrive
Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Size from Win32_DiskDrive

Contains long sleeps (>= 3 min)

Source: C:\Users\user\PCAppStore\Watchdog.exe

Thread delayed: delay time: 300000

Found dropped PE file which has not been started or loaded

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsa731E.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\inetc.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\nsJSON.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsa731E.tmp\inetc.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsa731E.tmp\Math.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsa731E.tmp\nsJSON.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsa731E.tmp\NSISFastLib.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Dropped PE file which has not been started: C:\Users\user\PCAppStore\Uninstaller.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	Dropped PE file which has not been started: C:\Users\user\PCAppStore\AutoUpdater.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\NSISFastLib.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\nsDialogs.dll	Jump to dropped file

May sleep (evasive loops) to hinder dynamic analysis

Source: C:\Users\user\PCAppStore\Watchdog.exe TID: 5544	Thread sleep count: 124 > 30
Source: C:\Users\user\PCAppStore\Watchdog.exe TID: 5544	Thread sleep time: -7440000s >= -30000s
Source: C:\Users\user\PCAppStore\Watchdog.exe TID: 4764	Thread sleep time: -300000s >= -30000s
Source: C:\Users\user\PCAppStore\Watchdog.exe TID: 5544	Thread sleep time: -60000s >= -30000s

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Source: C:\Users\user\Desktop\Setup.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select ReleaseDate from Win32_BIOS

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select UUID from Win32_ComputerSystemProduct
Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Vendor from Win32_ComputerSystemProduct
Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Version from Win32_ComputerSystemProduct
Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select UUID from Win32_ComputerSystemProduct

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Name from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select MaxClockSpeed from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfCores from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfLogicalProcessors from Win32_Processor

Sample execution stops while process was sleeping (likely an evasion)

Source: C:\Users\user\PCAppStore\PcAppStore.exe	Last function: Thread delayed
Source: C:\Users\user\PCAppStore\Watchdog.exe	Last function: Thread delayed
Source: C:\Users\user\PCAppStore\Watchdog.exe	Last function: Thread delayed

Source: C:\Users\user\PCAppStore\Watchdog.exe	Thread delayed: delay time: 60000
Source: C:\Users\user\PCAppStore\Watchdog.exe	Thread delayed: delay time: 300000
Source: C:\Users\user\PCAppStore\Watchdog.exe	Thread delayed: delay time: 60000

Source: Setup.exe, 00000001.00000003.11837769336.0000000000771000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: {"system_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"XXR39DW","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"CBXGDNG4+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20240819000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+24%2E09+%28x64%29",
Source: Setup.exe, 00000001.00000003.11838826691.0000000000781000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: {"system_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"XXR39DW","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"CBXGDNG4+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20240819000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+24%2E09+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2021+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Minimum+Runtime+-+14%2E42%2E34433","5":"Office+16+Click-to-Run+Licensing+Component","6":"Office+16+Click-to-Run+Extensibility+Component","7":"Adobe+Acrobat+%2864-bit%29","8":"Microsoft+Update+Health+Tools","9":"Microsoft+Visual+C%2B%2B+2022+X64+Additional+Runtime+-+14%2E42%2E34433","10":"Google+Chrome","11":"Microsoft+Edge","12":"Microsoft+Edge+Update","13":"Microsoft+Edge+WebView2+Runtime","14":"Java+Auto+Updater","15":"Java+8+Update+431","16":"Microsoft+Visual+C%2B%2B+2015-2022+Redistributable+%28x64%29+-+14%2E42%2E34433"},"processes":{"0":"ApplicationFrameHost%2Eexe","1":"Memory+Compression","2":"MicrosoftStartFeedProvider%2Eexe","3":"OfficeClickToRun%2Eexe","4":"Registry","5":"RuntimeBroker%2Eexe","6":"SearchHost%2Eexe","7":"SecurityHealthService%2Eexe","8":"SecurityHealthSystray%2Eexe","9":"Setup%2Eexe","10":"ShellExperienceHost%2Eexe","11":"StartMenuExperienceHost%2Eexe","12":"System","13":"SystemSettingsBroker%2Eexe","14":"WidgetBoard%2Eexe","15":"WidgetService%2Eexe","16":"WmiPrvSE%2Eexe","17":"%5BSystem+Process%5D","18":"conhost%2Eexe","19":"csrss%2Eexe","20":"ctfmon%2Eexe","21":"dllhost%2Eexe","22":"dwm%2Eexe","23":"explorer%2Eexe","24":"fontdrvhost%2Eexe","25":"lsass%2Eexe",
Source: Setup.exe, 00000001.00000003.11838426790.0000000000781000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: {"system_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"XXR39DW","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"CBXGDNG4+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20240819000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+24%2E09+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2021+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Minimum+Runtime+-+14%2E42%2E34433","5":"Office+16+Click-to-Run+Licensing+Component","6":"Office+16+Click-to-Run+Extensibility+Component","7":"Adobe+Acrobat+%2864-bit%29","8":"Microsoft+Update+Health+Tools","9":"Microsoft+Visual+C%2B%2B+2022+X64+Additional+Runtime+-+14%2E42%2E34433","10":"Google+Chrome","11":"Microsoft+Edge","12":"Microsoft+Edge+Update","13":"Microsoft+Edge+WebView2+Runtime","14":"Java+Auto+Updater","15":"Java+8+Update+431","16":"Microsoft+Visual+C%2B%2B+2015-2022+Redistributable+%28x64%29+-+14%2E42%2E34433"},"processes":{"0":"ApplicationFrameHost%2Eexe","1":"Memory+Compression","2":"MicrosoftStartFeedProvider%2Eexe","3":"OfficeClickToRun%2Eexe","4":"Registry","5":"RuntimeBroker%2Eexe","6":"SearchHost%2Eexe","7":"SecurityHealthService%2Eexe","8":"SecurityHealthSystray%2Eexe","9":"Setup%2Eexe","10":"ShellExperienceHost%2Eexe","11":"StartMenuExperienceHost%2Eexe","12":"System",
Source: Amcache.hve.23.dr	Binary or memory string: VMware, Inc.
Source: Setup.exe, 00000001.00000003.11838826691.0000000000781000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ustem_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"XXR39DW","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"CBXGDNG4+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20240819000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+24%2E09+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2021+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Minimum+Runtime+-+14%2E42%2E34433","5":"Office+16+Click-to-Run+Licensing+Component","6":"Office+16+Click-to-Run+Extensibility+Component","7":"Adobe+Acrobat+%2864-bit%29","8":"Microsoft+Update+Health+Tools","9":"Microsoft+Visual+C%2B%2B+2022+X64+Additional+Runtime+-+14%2E42%2E34433","10":"Google+Chrome","11":"Microsoft+Edge","12":"Microsoft+Edge+Update","13":"Microsoft+Edge+WebView2+Runtime","14":"Java+Auto+Updater","15":"Java+8+Update+431","16":"Microsoft+Visual+C%2B%2B+2015-2022+Redistributable+%28x64%29+-+14%2E42%2E34433"},"processes":{"0":"ApplicationFrameHost%2Eexe","1":"Memory+Compression","2":"MicrosoftStartFeedProvider%2Eexe","3":"OfficeClickToRun%2Eexe","4":"Registry",
Source: PcAppStore.exe, 0000000D.00000002.12969939231.0000023144000000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-USneZ
Source: Setup.exe, 00000001.00000003.12685172585.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000003.12675281886.0000000000781000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000002.12766119947.0000000000784000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000003.12759115203.0000000000782000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000003.12675281886.0000000000790000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12868878508.0000000000795000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12868212212.0000000000711000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000003.12865955826.000000000074A000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.13069487150.0000026CA02F1000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12969509433.0000026CA02C6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Setup.exe, 00000001.00000002.12767899590.0000000002B10000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000003.12865955826.000000000074A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.0000023144000000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12969509433.0000026CA0335000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000002.13096900000.0000026CA0340000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.13069487150.0000026CA0337000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWf
Source: nsc5D64.tmp, 0000000A.00000002.12868212212.0000000000711000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.r
Source: Amcache.hve.23.dr	Binary or memory string: VMware-56 4d 5e b8 7f fe b2 05-05 05 26 a7 ed b4 36 80
Source: nsc5D64.tmp, 0000000A.00000003.12810371358.000000000423D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware%2C+Inc%2E
Source: Setup.exe, 00000001.00000003.11837769336.0000000000771000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: jstem_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"XXR39DW","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"CBXGDNG4+SCSI+Disk+Device",
Source: PcAppStore.exe, 0000000D.00000002.12966151524.000002314200C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: stringComputer System ProductComputer System Product3HEBFOB85E4D56-FE7F-05B2-0505-26A7EDB43680VMware, Inc.Noney*
Source: Setup.exe, 00000001.00000003.11838426790.0000000000758000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware%2C+Inc%2Ez
Source: Setup.exe, 00000001.00000003.11838826691.0000000000771000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: stem_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"XXR39DW","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"CBXGDNG4+SCSI+Disk+Device",
Source: Watchdog.exe, 0000000E.00000002.13096900000.0000026CA02CD000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12969509433.0000026CA02C6000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.13069487150.0000026CA02CD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWX
Source: Setup.exe, 00000001.00000002.12766119947.0000000000771000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_versH
Source: tempPOSTData.10.dr	Binary or memory string: {"system_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"XXR39DW","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"CBXGDNG4+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20240819000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+24%2E09+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2021+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Minimum+Runtime+-+14%2E42%2E34433","5":"Office+16+Click-to-Run+Licensing+Component","6":"Office+16+Click-to-Run+Extensibility+Component","7":"Adobe+Acrobat+%2864-bit%29","8":"Microsoft+Update+Health+Tools","9":"Microsoft+Visual+C%2B%2B+2022+X64+Additional+Runtime+-+14%2E42%2E34433","10":"Google+Chrome","11":"Microsoft+Edge","12":"Microsoft+Edge+Update","13":"Microsoft+Edge+WebView2+Runtime","14":"Java+Auto+Updater","15":"Java+8+Update+431","16":"Microsoft+Visual+C%2B%2B+2015-2022+Redistributable+%28x64%29+-+14%2E42%2E34433"},"processes":{"0":"ApplicationFrameHost%2Eexe","1":"Memory+Compression","2":"MicrosoftStartFeedProvider%2Eexe","3":"OfficeClickToRun%2Eexe","4":"Registry","5":"RuntimeBroker%2Eexe","6":"SearchHost%2Eexe","7":"SecurityHealthService%2Eexe","8":"SecurityHealthSystray%2Eexe","9":"ShellExperienceHost%2Eexe","10":"StartMenuExperienceHost%2Eexe","11":"System","12":"SystemSettingsBroker%2Eexe","13":"WidgetBoard%2Eexe","14":"WidgetService%2Eexe","15":"WmiPrvSE%2Eexe","16":"%5BSystem+Process%5D","17":"chrome%2Eexe","18":"conhost%2Eexe","19":"csrss%2Eexe","20":"ctfmon%2Eexe","21":"dllhost%2Eexe","22":"dwm%2Eexe","23":"explorer%2Eexe","24":"fontdrvhost%2Eexe","25":"lsass%2Eexe","26":"msedgewebview2%2Eexe","27":"nsc5D64%2Etmp","28":"services%2Eexe","29":"sihost%2Eexe","30":"smartscreen%2Eexe","31":"smss%2Eexe","32":"spoolsv%2Eexe","33":"svchost%2Eexe","34":"wininit%2Eexe","35":"winlogon%2Eexe"}}
Source: Amcache.hve.23.dr	Binary or memory string: VMware20,1
Source: PcAppStore.exe, 0000000D.00000002.12966151524.000002314200C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP!
Source: Setup.exe, 00000001.00000003.11838426790.0000000000781000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: jstem_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"XXR39DW","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"CBXGDNG4+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20240819000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+24%2E09+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2021+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Minimum+Runtime+-+14%2E42%2E34433","5":"Office+16+Click-to-Run+Licensing+Component","6":"Office+16+Click-to-Run+Extensibility+Component","7":"Adobe+Acrobat+%2864-bit%29","8":"Microsoft+Update+Health+Tools","9":"Microsoft+Visual+C%2B%2B+2022+X64+Additional+Runtime+-+14%2E42%2E34433","10":"Google+Chrome","11":"Microsoft+Edge","12":"Microsoft+Edge+Update","13":"Microsoft+Edge+WebView2+Runtime","14":"Java+Auto+Updater","15":"Java+8+Update+431","16":"Microsoft+Visual+C%2B%2B+2015-2022+Redistributable+%28x64%29+-+14%2E42%2E34433"},"processes":{"0":"ApplicationFrameHost%2Eexe","1":"Memory+Compression","2":"MicrosoftStartFeedProvider%2Eexe","3":"OfficeClickToRun%2Eexe","4":"Registry",
Source: Amcache.hve.23.dr	Binary or memory string: VMware Virtual RAM
Source: Setup.exe, 00000001.00000003.11838426790.0000000000771000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: xstem_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"XXR39DW","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"CBXGDNG4+SCSI+Disk+Device",
Source: Setup.exe, 00000001.00000003.11838826691.0000000000771000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: {"system_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"XXR39DW","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"CBXGDNG4+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20240819000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+24%2E09+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2021+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Minimum+Runtime+-+14%2E42%2E34433","5":"Office+16+Click-to-Run+Licensing+Component","6":"Office+16+Click-to-Run+Extensibility+Component","7":"Adobe+Acrobat+%2864-bit%29",

Source: C:\Users\user\Desktop\Setup.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Checks if the current process is being debugged

Source: C:\Users\user\PCAppStore\PcAppStore.exe	Process queried: DebugPort			Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Process queried: DebugPort			Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Creates a process in suspended mode (likely to inject code)

Source: C:\Users\user\Desktop\Setup.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pcapp.store/installing.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&winver=22631&version=fa.2002&nocache=20250110102314.55&_fcid=1736265551741605

Jump to behavior

Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: o@C:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hShell_TrayWndWilError_03{"action":"direction_changed","data":{"direction":"%c", "withTopbar":false}}{"action":"screen_size_changed","data":{"withTopbar":false,"t":%d,"l":%d,"b":%d,"r":%d}}{"action":"locale_layout_changed","data":{"localeLayout": "%ws"}}@S.@
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: C++/WinRT version:2.0.220110.5\\\HKEY_CLASSES_ROOTHKEY_CURRENT_USERHKEY_LOCAL_MACHINEHKEY_USERSHKEY_CURRENT_CONFIGCurrentBuildBuildNumberSOFTWARE\Microsoft\Windows NT\CurrentVersionSOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon%lu0e+000e+00%us%5B%5D=\uRoGetActivationFactorycombase.dllCoIncrementMTAUsagecombase.dll.dllDllGetActivationFactoryRoGetActivationFactorycombase.dllCoIncrementMTAUsagecombase.dll.dllDllGetActivationFactoryparamsnamenfinityanindsnannfinityanindtype must be string, but is snan0p+00p+0^(https?://(?:www.)?([^/]+))(/.*)?$URL format is not valid : %wsWinHTTP 1.0handle initialization failuretimeout init failurehandle connection failureGEThandle request creation failurehandle request or response failurefile creation failurequery data not availableproductr_binErreCode=%dproductcreate_shortcutshortcut_erroroid=%luSHGetFolderPath_error_code=%X&oid=%luQueryInterface_error_code=%X&oid=%luCoCreateInstance_error_code=%X&oid=%lu.lnk.lnkproductshortcut_delete_erroreC=%Xinfnan(ind)nannan(snan)infnan(ind)nannan(snan)infnan(ind)nannan(snan)Shell_TrayWndinfnan(ind)nannan(snan)infnan(ind)nannan(snan)infnan(ind)nannan(snan)type must be string, but is unknownmenu_storemenu_searchhttps://pcapp.store%02Xunknown\/LTRRTLLTRSoftware\PCAppStoreAppParamdefaultbad allocation
Source: PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp	Binary or memory string: o@C:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hShell_TrayWndWilError_03{"action":"direction_changed","data":{"direction":"%c", "withTopbar":false}}{"action":"screen_size_changed","data":{"withTopbar":false,"t":%d,"l":%d,"b":%d,"r":%d}}{"action":"locale_layout_changed","data":{"localeLayout": "%ws"}}@S
Source: nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	Binary or memory string: C:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2002_D20241129T170824\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hCoInitialize+Init+FailedCoCreateInstance+CLSID_AppVisibility+IID_IAppVisibilitymenu_searchshowclosepage=aopen_searchIAppVisibility+IsLauncherVisibleWilError_03SearchWindows.UI.Core.CoreWindowSearchHost.exeSearchApp.exeSearchButtonToggleButtonShell_SecondaryTrayWndShell_TrayWnd

Language, Device and Operating System Detection

Queries the volume information (name, serial number etc) of a device

Source: C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

Queries volume information: C:\ VolumeInformation

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

AV process strings found (often used to terminate AV products)

Source: Amcache.hve.23.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.23.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.23.dr	Binary or memory string: MsMpEng.exe

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : Select displayName from AntiSpywareProduct
Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : Select displayName from AntiVirusProduct
Source: C:\Users\user\Desktop\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : Select displayName from FirewallProduct

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	141 Windows Management Instrumentation	1 Windows Service	1 Windows Service	1 Masquerading	1 Input Capture	251 Security Software Discovery	Remote Services	1 Input Capture	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	111 Registry Run Keys / Startup Folder	12 Process Injection	151 Virtualization/Sandbox Evasion	LSASS Memory	2 Process Discovery	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Bootkit	111 Registry Run Keys / Startup Folder	12 Process Injection	Security Account Manager	151 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	1 DLL Side-Loading	1 DLL Side-Loading	1 Bootkit	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	1 DLL Search Order Hijacking	1 DLL Search Order Hijacking	1 DLL Side-Loading	LSA Secrets	132 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Search Order Hijacking	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner
C:\Users\user\AppData\Local\Temp\nsa731E.tmp\Math.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsa731E.tmp\NSISFastLib.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsa731E.tmp\System.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsa731E.tmp\inetc.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsa731E.tmp\nsJSON.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsc5D64.tmp	35%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\NSISFastLib.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\System.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\inetc.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\nsDialogs.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\nsJSON.dll	0%	ReversingLabs
C:\Users\user\PCAppStore\AutoUpdater.exe	8%	ReversingLabs
C:\Users\user\PCAppStore\PcAppStore.exe	17%	ReversingLabs
C:\Users\user\PCAppStore\Uninstaller.exe	26%	ReversingLabs
C:\Users\user\PCAppStore\Watchdog.exe	17%	ReversingLabs

Source	Detection	Scanner	Label
https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=&evt_src=fa_mini_insta	0%	Avira URL Cloud	safe
https://pcapp.store%02Xunknown	0%	Avira URL Cloud	safe
https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=fa.2002	0%	Avira URL Cloud	safe
https://pcappstore.s3.amazonaws.com/versionrinstruction_failed%ws?guid=%ws&nocache=%dauto_updater.ex	0%	Avira URL Cloud	safe
https://d74queuslupub.cloudfront.net//as	0%	Avira URL Cloud	safe
https://google.comlast_v=%ws&dl_lnk=%wsempty_instructionsno_internet_connectionend	0%	Avira URL Cloud	safe
https://d74queuslupub.cloudfront.net/RfW	0%	Avira URL Cloud	safe
https://d74queuslupub.cloudfront.net/	0%	Avira URL Cloud	safe
https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=fa.2002h	0%	Avira URL Cloud	safe
https://d74queuslupub.cloudfront.net/soft	0%	Avira URL Cloud	safe
https://d74queuslupub.cloudfront.net/de	0%	Avira URL Cloud	safe
https://d74queuslupub.cloudfront.net/2	0%	Avira URL Cloud	safe
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
1715720427.rsc.cdn77.org	169.150.255.183	true	false	high
google.com	216.58.206.46	true	false	high
pcapp.store	167.99.235.203	true	false	high
d74queuslupub.cloudfront.net	18.173.205.91	true	false	high
stats.g.doubleclick.net	142.251.173.156	true	false	high
publickeyservice.pa-3.aws.privacysandboxservices.com	13.32.99.65	true	false	high
fg.microsoft.map.fastly.net	199.232.214.172	true	false	high
googleads.g.doubleclick.net	142.250.184.226	true	false	high
1285660440.rsc.cdn77.org	37.19.194.80	true	false	unknown
publickeyservice-a.pa-3.gcp.privacysandboxservices.com	34.111.189.158	true	false	high
www.google.com	142.250.185.228	true	false	high
td.doubleclick.net	142.250.186.66	true	false	high
analytics.google.com	216.58.212.174	true	false	high
windows.msn.com	unknown	unknown	false	high
assets.msn.com	unknown	unknown	false	high
publickeyservice.pa.gcp.privacysandboxservices.com	unknown	unknown	false	high
universalstore.streaming.mediaservices.windows.net	unknown	unknown	false	high
publickeyservice.pa.aws.privacysandboxservices.com	unknown	unknown	false	high
repository.pcapp.store	unknown	unknown	false	high
delivery.pcapp.store	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":1,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736529061&nocache=24538	false		unknown
https://assets.msn.com/staticsb/statics/latest/icons-wc/icons/TrendingLight.svg	false		high
https://pcapp.store/api/pcapp_engine.php?a=config&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002	false		high
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=show_page&p=wel&_fcid=1736265551741605	false		high
https://browser.events.data.msn.cn/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1736522591996&w=0&anoncknm=al_app_anon&NoResponseBody=true	false		high
https://pcapp.store/api/api.php	false		high
https://assets.msn.com/service/news/feed/pages/dashboard4?aver=1.1.200.0&over=10.0.22631.4169.amd64fre.ni_release.220506-1250&fring=Retail&devicetype=1&oem=VMware%2C%20Inc.&smode=false&machineId=%7BADA0F343-6E11-4C03-89DA-546517CD1A62%7D&clv=3.0&hver=524.30502.30.0&locale=en-US&region=CH&apikey=lxSNtibdZ45aPe8BHuUR6XwhuuruYfwejEYNpSqgcd&ocid=winp2widget&timeOut=2000&activityId=fde7885d-f607-4cc9-bdad-8f7a12df416a&user=m-14EA2E828C4D639509943BD28D2B6272&cm=de-ch&caller=retryBgFetch&theme=light&nw=false&msrc=0&it=app&scn=al_app_anon&clientFeatures=1	false		high
https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=fa.2002	false	Avira URL Cloud: safe	unknown
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":10,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736547170&nocache=21359	false		unknown
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":5,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736537096&nocache=4900	false		unknown
https://assets.msn.com/bundles/v1/winWidgets/latest/libs_ad-service_dist_CookieConsentService_js-libs_ad-service_dist_CookieService_js-libs_ad-se-22340a.901222ed36abf8327ebb.js	false		high
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_installer&evt_action=installing&e=03000200-0400-0500-0006-000700080009&u=74	false		high
https://assets.msn.com/service/news/feed/pages/dashboard4?aver=1.1.200.0&over=10.0.22631.4169.amd64fre.ni_release.220506-1250&fring=Retail&devicetype=1&oem=VMware%2C%20Inc.&smode=false&machineId=%7BADA0F343-6E11-4C03-89DA-546517CD1A62%7D&clv=3.0&hver=524.30502.30.0&locale=en-US&region=CH&apikey=lxSNtibdZ45aPe8BHuUR6XwhuuruYfwejEYNpSqgcd&ocid=winp2widget&timeOut=2000&activityId=293baa31-2af8-4f1e-924e-413af5be3dea&user=m-14EA2E828C4D639509943BD28D2B6272&cm=de-ch&caller=bgtask&theme=light&nw=false&msrc=0&it=app&scn=al_app_anon&clientFeatures=1	false		high
https://assets.msn.com/bundles/v1/winWidgets/latest/common.c9e5ca54f8fe5dc7fd57.js	false		high
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=start&permision=&_fcid=1736265551741605	false		high
https://pcapp.store/installing.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&winver=22631&version=fa.2002&nocache=20250110102314.55&_fcid=1736265551741605	false		high
https://pcapp.store/images/front_img/logo/logo-dark.svg	false		high
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=download_start&_fcid=1736265551741605	false		high
https://pcapp.store/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg	false		high
https://assets.msn.com/bundles/v1/winWidgets/latest/common-segments.484c688f730e76f122fa.js	false		high
https://assets.msn.com/bundles/v1/winWidgets/latest/widgets-start-feed.8a3a9e79ea6f02f553b6.js	false		high
https://pcapp.store/pixelgif.php	false		high
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_installer&evt_action=localmac&addon[]=80-C1-6E-AA-B5-C8	false		high
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":3,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736533019&nocache=31007	false		unknown
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":9,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736545131&nocache=18028	false		unknown
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_installer&evt_action=internal&prev_v=fa.2002	false		high
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":4,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736535058&nocache=1570	false		unknown
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":12,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736551007&nocache=27629	false		unknown
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":11,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736549088&nocache=24494	false		unknown
https://pcapp.store/lp/lpd_installing_r2/src/lpd_installing_r2.min.css?nocache=1731594251558	false		high
https://assets.msn.com/bundles/v1/winWidgets/latest/common-feed-libs.cad137bb0459e28c3b26.js	false		high
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":13,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736553286&nocache=31352	false		unknown
https://pcapp.store/src/main.js	false		high
https://assets.msn.com/bundles/v1/winWidgets/latest/cs-core-desktop_card-components_dist_card-banner_index_js-cs-core-desktop_card-components_dis-9069ae.abf514e47605b1f8c4fc.js	false		high
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_product&evt_action=started&prnt=nsc5D64.tmp&sys_lang=en-US&eng_time=1736526543517&nocache=5219859	false		high
https://assets.msn.com/bundles/v1/winWidgets/latest/vendors.b540f4f9497b6ced4cf6.js	false		high
https://assets.msn.com/weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/AAehR3S.png	false		high
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":7,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736540934&nocache=11170	false		unknown
https://assets.msn.com/bundles/v1/winWidgets/latest/microsoft.5503fd0abb68caa4c2f5.js	false		high
https://assets.msn.com/bundles/v1/winWidgets/latest/common-sports-lib.cf9f764561464dba4117.js	false		high
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_product&evt_action=webview_error&reason=failed_to_create_thread_hook&eng_time=1736526545358&nocache=5221828	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://pcapp.store%02Xunknown	nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	false	Avira URL Cloud: safe	unknown
https://pcapp.store//src/app/appOffer.jsu.js	PcAppStore.exe, 0000000D.00000002.12966151524.00000231420BA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appOffer.js#-	PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_228.7.dr, chromecache_237.7.dr, chromecache_230.7.dr, chromecache_213.7.dr	false		high
https://pcapp.store//app0	PcAppStore.exe, 0000000D.00000002.12969939231.0000023144093000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//appstore-hint/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.20022	PcAppStore.exe, 0000000D.00000002.12966151524.0000023142085000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/api/pcapp_engine.php?a=config&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=	PcAppStore.exe, 0000000D.00000003.12873093781.0000023142048000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000003.12873093781.00000231420B1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.0000023142085000.00000004.00000020.00020000.00000000.sdmp	false		high
https://d74queuslupub.cloudfront.net//as	Watchdog.exe, 0000000E.00000002.13096900000.0000026CA0329000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12969509433.0000026CA0318000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.13069487150.0000026CA0325000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pcapp.store//src/app/appOffer.js	PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//appstore-settings/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002DX	PcAppStore.exe, 0000000D.00000002.12969939231.0000023144082000.00000004.00000020.00020000.00000000.sdmp	false		high
https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=&evt_src=fa_mini_insta	Setup.exe, 00000001.00000002.12765631606.00000000006B7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com	chromecache_213.7.dr	false		high
https://www.youtube.com/iframe_api	chromecache_228.7.dr, chromecache_237.7.dr, chromecache_230.7.dr, chromecache_213.7.dr	false		high
https://pcappstore.s3.amazonaws.com/versionrinstruction_failed%ws?guid=%ws&nocache=%dauto_updater.ex	nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr	false	Avira URL Cloud: safe	unknown
https://pcapp.store//src/app/appStore.js	PcAppStore.exe, 0000000D.00000002.12966151524.00000231420BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://d74queuslupub.cloudfront.net/RfW	Watchdog.exe, 0000000E.00000003.13069487150.0000026CA032C000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000002.13096900000.0000026CA032C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pcapp.store:443/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=	PcAppStore.exe, 0000000D.00000002.12969939231.00000231440A5000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000003.12873093781.0000023142048000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store:443/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&	PcAppStore.exe, 0000000D.00000002.12969939231.00000231440A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/tos.html?guid=	Setup.exe, 00000001.00000002.12765631606.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12868212212.00000000006E5000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026BF000.00000004.00000020.00020000.00000000.sdmp, nsf72A0.tmp.10.dr	false		high
https://pcapp.store//src/app/appSearchMenu.jsarchMJX	PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appWidget.js1	PcAppStore.exe, 0000000D.00000002.12966151524.00000231420BA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/fa_version.php?guid=%ws&end_v=%ws&nocache=%d	nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr	false		high
https://pcapp.store//appstore-hint/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002	PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//appstore-menu/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.20022	PcAppStore.exe, 0000000D.00000002.12966151524.0000023142085000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/pixel.gif?guid=	Setup.exe, 00000001.00000003.12685172585.0000000000747000.00000004.00000020.00020000.00000000.sdmp	false		high
https://google.comlast_v=%ws&dl_lnk=%wsempty_instructionsno_internet_connectionend	nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, AutoUpdater.exe.10.dr, nsf72A0.tmp.10.dr	false	Avira URL Cloud: safe	unknown
https://pcapp.store/?p=lpd_appstore-faq	nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, nsf72A0.tmp.10.dr, ReadMe.txt.10.dr	false		high
https://pcapp.store/G	PcAppStore.exe, 0000000D.00000003.12873093781.0000023142048000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appWindow.js	PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/K	PcAppStore.exe, 0000000D.00000002.12966151524.000002314200C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/M	Setup.exe, 00000001.00000002.12767899590.0000000002B10000.00000004.00000020.00020000.00000000.sdmp	false		high
https://d74queuslupub.cloudfront.net/	Watchdog.exe, 0000000E.00000002.13096900000.0000026CA0329000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000002.13103061949.0000026CA202E000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.12969509433.0000026CA0318000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000003.13069487150.0000026CA0325000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=fa.2002h	Setup.exe, 00000001.00000003.12759115203.000000000074F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pcapp.store/notify_app_v2.php?guid=&lastid=&lasttime=&nocache=&end_v=%ws%ws%ws%d%ws%d%ws%ws%	nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	false		high
https://pcapp.store/pixel.gifC:	nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	false		high
https://pcapp.store//appstore-settings/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002n=f	PcAppStore.exe, 0000000D.00000002.12966151524.0000023142085000.00000004.00000020.00020000.00000000.sdmp	false		high
http://nsis.sf.net/NSIS_ErrorError	Setup.exe, nsc5D64.tmp.1.dr, nsf72A0.tmp.10.dr, Uninstaller.exe.10.dr	false		high
https://pcapp.store/T	nsc5D64.tmp, 0000000A.00000003.12865955826.000000000074A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/QRJ	PcAppStore.exe, 0000000D.00000002.12969939231.0000023144082000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/installing.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&winver=22631&version=fa	Setup.exe, 00000001.00000003.12759511491.0000000002B92000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cct.google/taggy/agent.js	chromecache_228.7.dr, chromecache_237.7.dr, chromecache_223.7.dr, chromecache_230.7.dr, chromecache_222.7.dr, chromecache_213.7.dr	false		high
https://pcapp.store/	Setup.exe, 00000001.00000003.12685480349.0000000002B96000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000002.12767899590.0000000002B10000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000001.00000003.12759511491.0000000002B92000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12875692795.0000000004220000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12875692795.0000000004274000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000003.12865955826.000000000074A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.000002314206E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12974465470.00007FF69A1CA000.00000004.00000001.01000000.00000016.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.0000023144082000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000003.12873093781.0000023142048000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12966151524.000002314200C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/installing.php?guid=&winver=	Setup.exe, 00000001.00000002.12765631606.00000000006B7000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12868212212.00000000006E5000.00000004.00000020.00020000.00000000.sdmp, nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026BF000.00000004.00000020.00020000.00000000.sdmp, nsf72A0.tmp.10.dr	false		high
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43:	PcAppStore.exe, 0000000D.00000002.12969939231.00000231440A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_p	PcAppStore.exe, 0000000D.00000002.12969939231.0000023144093000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.00000231440B8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.0000023144000000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000003.12873093781.00000231420B1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://d74queuslupub.cloudfront.net/soft	Watchdog.exe, 0000000E.00000003.12969509433.0000026CA0318000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://d74queuslupub.cloudfront.net/de	Watchdog.exe, 0000000E.00000003.13069487150.0000026CA032C000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000000E.00000002.13096900000.0000026CA032C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://d74queuslupub.cloudfront.net/2	Watchdog.exe, 0000000E.00000002.13103061949.0000026CA202E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pcapp.store//appstore-menu/?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002U	PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/n	nsc5D64.tmp, 0000000A.00000003.12781184078.0000000004228000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/-end-point:	Setup.exe, 00000001.00000003.12759511491.0000000002B92000.00000004.00000020.00020000.00000000.sdmp	false		high
https://d74queuslupub.cloudfront.net/p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002	Watchdog.exe, 0000000E.00000003.13069487150.0000026CA0337000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pcapp.store/cpg_fa.php?guid=An	nsc5D64.tmp, 0000000A.00000002.12869842372.00000000026E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000000.12851617313.00007FF69A149000.00000002.00000001.01000000.00000016.sdmp, PcAppStore.exe.10.dr, nsf72A0.tmp.10.dr	false		high
https://pcapp.store/s	nsc5D64.tmp, 0000000A.00000002.12875692795.0000000004274000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/privacy.html?guid=welhttps://pcapp.store/pixel.gif?guid=&version=&evt_src=fa_min	Setup.exe, 00000001.00000002.12765631606.00000000006B7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_m	Setup.exe, 00000001.00000003.12759511491.0000000002B92000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/x	PcAppStore.exe, 0000000D.00000002.12966151524.000002314200C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appHint.js	PcAppStore.exe, 0000000D.00000002.12966151524.00000231420C3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 0000000D.00000002.12969939231.000002314404A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_i	nsc5D64.tmp, 0000000A.00000002.12868878508.000000000078E000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	www.google.com	United States	15169	GOOGLEUS	false
18.173.205.91	d74queuslupub.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
13.32.99.65	publickeyservice.pa-3.aws.privacysandboxservices.com	United States	16509	AMAZON-02US	false
159.223.126.41	unknown	United States	46118	CELANESE-US	false
142.250.184.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.111.189.158	publickeyservice-a.pa-3.gcp.privacysandboxservices.com	United States	15169	GOOGLEUS	false
142.251.173.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
167.99.235.203	pcapp.store	United States	14061	DIGITALOCEAN-ASNUS	false
216.58.206.46	google.com	United States	15169	GOOGLEUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
159.203.177.96	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
37.19.194.80	1285660440.rsc.cdn77.org	Ukraine	31343	INTERTELECOMUA	false
169.150.255.183	1715720427.rsc.cdn77.org	United States	2711	SPIRITTEL-ASUS	false
207.211.211.26	unknown	United States	14135	NAVISITE-EAST-2US	false
142.250.186.66	td.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.24

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587713
Start date and time:	2025-01-10 16:20:42 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 11 23H2 with Office Professional Plus 2021, Chrome 131, Firefox 133, Adobe Reader DC 24, Java 8 Update 431, 7zip 24.09
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	27
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Setup.exe
Detection:	MAL
Classification:	mal42.evad.winEXE@28/94@36/17
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, SIHClient.exe, appidcertstorecheck.exe, conhost.exe, msedgewebview2.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.64.149.23, 104.18.38.233, 192.229.221.95, 204.79.197.203, 142.250.184.195, 66.102.1.84, 142.250.74.206, 142.250.186.46, 142.250.186.138, 142.250.186.67, 142.250.185.168, 142.250.186.78, 216.58.206.40, 172.217.23.110, 142.250.186.136, 216.58.212.174, 48.209.144.71, 13.107.42.16, 13.107.21.239, 204.79.197.239, 172.217.18.110, 108.141.37.120, 172.217.16.142, 20.42.73.29, 142.250.181.234, 172.217.23.106, 142.250.186.170, 216.58.206.42, 142.250.184.234, 142.250.185.234, 172.217.16.138, 172.217.16.202, 216.58.212.138, 216.58.206.74, 142.250.184.202, 142.250.185.74, 142.250.185.170, 142.250.186.106, 172.217.18.10, 142.250.185.106, 216.58.212.142, 142.250.185.174, 216.58.206.78, 23.43.85.27, 23.43.85.24, 23.43.85.18, 23.43.85.30, 23.43.85.31, 23.43.85.22, 23.43.85.32, 23.43.85.20, 23.43.85.34, 72.21.81.200, 142.251.40.227, 142.250.72.99, 4.175.87.197, 20.190.152.20, 2.16.158.192, 40.126.31.73
Excluded domains from analysis (whitelisted): crt.comodoca.com.cdn.cloudflare.net, c9371f6604c74c62b5cc96335743d2ff.azureedge.net, prod-atm-wds-nav.trafficmanager.net, slscr.update.microsoft.com, img-s-msn-com.akamaized.net, data-edge.smartscreen.microsoft.com, clientservices.googleapis.com, oneocsp.microsoft.com, nav.smartscreen.microsoft.com, clients2.google.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, login.live.com, config-edge-skype.l-0007.l-msedge.net, onedsblobprdeus15.eastus.cloudapp.azure.com, www.gstatic.com, l-0007.l-msedge.net, star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com, www.bing.com, fonts.googleapis.com, prod-atm-wds-edge.trafficmanager.net, www.googleapis.com, prod-agic-we-5.westeurope.cloudapp.azure.com, crt.comodoca.com, watson.events.data.microsoft.com, clients.l.google.com, prod-agic-ne-7.northeurope.cloudapp.azure.com, cs9.wpc.v0cdn.net, chrome.cloudflare-dns.com, config.edge.skype.com.trafficmanager.net, c9371f6604c74c62b5cc96335743d2ff.ec.azureedge.net, redirec
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Setup.exe

Simulations

Behavior and APIs

Time	Type	Description
10:23:31	API Interceptor	220x Sleep call for process: Watchdog.exe modified
10:23:41	API Interceptor	1x Sleep call for process: WerFault.exe modified

LLM Input / Output

Input	Output
URL: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://pcapp.store Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://pcapp.store
URL: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Summoning the app genie", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Model: Joe Sandbox AI	{ "brands": [ "PC App Store" ] }
	{ "brands": [ "PC App Store" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
18.173.205.91	https://veryfast.io/?ap=adw&as=g_d_fast_in&dm%5Bads%5D=new_static&dm%5Btype%5D=dis&gad_source=5&gclid=EAIaIQobChMIgp352NzmigMVZAOzAB0wMA8oEAEYASAAEgI_hfD_BwE	Get hash	malicious	Unknown	Browse
	Setup.exe.7z	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	https://desertgarprodentalbdenmontessori.sharefile.com/public/share/web-sc0171e76f26940ab83813f90c639bcc9	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	https://premierbb.sharefile.com/public/share/web-189361297164461c	Get hash	malicious	EvilProxy, HTMLPhisher	Browse
	https://u1404228.ct.sendgrid.net/ls/click?upn=u001.53NsXfgUBOeYzK87Mt8UmmFmJrZ7XUeaM2H1JJzIOlLD8XdRMGUjLjiETSkkNSOO1aPcOhsB-2B6p58337PPTvLBJHf93ZwdhKuc0pYJ3CCFhPzGYkRFXax0jGvIeRFmcP5G0BUyJ6YhdCuxj2rmKfEA3sfYg2UNxl72w1Me3oPfdrF6jbhGk315PA9TABMIUQaw-2BWiKWUThNlxL-2FiIJdoH5tiTQT-2Bm8o6f2DtPJqJqYyOmKsC6Z8r8BDMH-2BRyR0DPAbc1o4jsJAeLDJ31LwWjsFQYr3zFK5cIf8Mbd-2BRzOeXFDSMm6es3Y0fepvpPG5r7pfagssMFSYnyu8MHsVv5hRcIKJqjAZyLx1ckeV-2FaCznPfw8naJb82iSt3TNueNL1vH7DevWmKVRPxk4wZ5wzTJXKbWW9anlXuh-2BQXFzp8R8-2BdEEizEjCv3UcDuHMQ1pDH865wy4DUZnYMpZjJQJPawcQswhgRnWgvPzhIRyQE-2Bc-3DkIeO_CR4Iv1KReyG-2BUTiHEM2iSrmxUTGCd7nll-2F8pyW4fRHUIiL68JldL5hjEvlqIxpWk9hPYxNH8eo9VRHfVERALBwpMyAhjDc4FUwScFs2ucRUabaJ73tdO-2FPebairfMf4xwZ2dpDlmkqO5pmgc1gE0gGghSpi3dDGJNhz4YymAGUOPzRzAYltzk0Ba7IAVZeXH7Jn8rume2KIoU57-2Fl62ae-2FaTXSu1TIVQ6Migf-2F6NGXqO6vztNaikiQe23mzDzfi19JJ-2FVN5j6ZPVhD34lLHzKpdiifzixAZur7VZCR5Hc24MfYQGTYVbJWBIhMdpT2lgG-2Bg-2FTIWWIZlY-2Fzm-2BK3i-2F0Q-3D-3D	Get hash	malicious	Unknown	Browse
13.32.99.65	https://wetransfer.com/downloads/fba8446149d20edcdcf37d63699c300320240916111055/9e1e4e941b3d5baf51e58ce4afc08bf520240916111122/d348f9?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid	Get hash	malicious	Unknown	Browse
	http://izcumyt.com/QkMX2aOL	Get hash	malicious	Unknown	Browse
	https://www.cexpr.es/c?n=3230005694527383	Get hash	malicious	Unknown	Browse
159.223.126.41	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	https://pcapp.store/pixel.gif	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	tKr6T60C1r.exe	Get hash	malicious	Unknown	Browse
	MDE_File_Sample_ba40401128d2ff2734a7e554120b7de438870654.zip	Get hash	malicious	Unknown	Browse
	https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwj85-Cx0Pz-AhV5FVkFHezeDZcQFnoECCUQAQ&url=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&usg=AOvVaw0mYQOAG6hFsIBU_fVcAryo	Get hash	malicious	Unknown	Browse
167.99.235.203	Setup.exe	Get hash	malicious	Unknown	Browse	pcapp.store/notify_app_v2.php?guid=2ED92742-89DC-DD72-92E8-869FA5A66493&lastid=0&lasttime=0&end_v=fa.1092c&nocache=5655328

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
d74queuslupub.cloudfront.net	https://veryfast.io/?ap=adw&as=g_d_fast_in&dm%5Bads%5D=new_static&dm%5Btype%5D=dis&gad_source=5&gclid=EAIaIQobChMIgp352NzmigMVZAOzAB0wMA8oEAEYASAAEgI_hfD_BwE	Get hash	malicious	Unknown	Browse	18.173.205.91
	Setup.exe.7z	Get hash	malicious	Unknown	Browse	18.173.205.91
	Setup.exe (1).zip	Get hash	malicious	Unknown	Browse	18.161.97.97
	Setup.exe	Get hash	malicious	Unknown	Browse	18.239.94.39
	Setup.exe	Get hash	malicious	Unknown	Browse	18.173.205.111
	tKr6T60C1r.exe	Get hash	malicious	Unknown	Browse	18.173.205.111
	Setup.exe	Get hash	malicious	Unknown	Browse	18.173.205.117
	Setup (1).exe	Get hash	malicious	Unknown	Browse	18.239.94.126
1715720427.rsc.cdn77.org	https://veryfast.io/?ap=adw&as=g_d_fast_in&dm%5Bads%5D=new_static&dm%5Btype%5D=dis&gad_source=5&gclid=EAIaIQobChMIgp352NzmigMVZAOzAB0wMA8oEAEYASAAEgI_hfD_BwE	Get hash	malicious	Unknown	Browse	37.19.194.80
	Setup.exe.7z	Get hash	malicious	Unknown	Browse	37.19.194.80
	Setup.exe (1).zip	Get hash	malicious	Unknown	Browse	79.127.138.14
	Setup.exe	Get hash	malicious	Unknown	Browse	207.211.211.27
	SetupEngine.exe	Get hash	malicious	Unknown	Browse	207.211.211.27
	https://veryfast.io	Get hash	malicious	Unknown	Browse	169.150.255.183
	https://veryfast.io	Get hash	malicious	Unknown	Browse	195.181.170.18
	Setup.exe	Get hash	malicious	Unknown	Browse	195.181.170.18
	tKr6T60C1r.exe	Get hash	malicious	Unknown	Browse	207.211.211.27
	https://pivotanimator.net/Download.php	Get hash	malicious	Unknown	Browse	156.146.33.14
pcapp.store	Setup.exe	Get hash	malicious	Unknown	Browse	207.246.91.177

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MIT-GATEWAYSUS	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	18.66.147.32
	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	Get hash	malicious	Unknown	Browse	18.66.102.48
	sora.arm.elf	Get hash	malicious	Mirai	Browse	18.160.223.67
	https://Covid19.protected-forms.com/XbzFOWGtmMFBFWHdHRklWcjBnd3prY2tUQ3NVdmpyVjExSzNkakhIQ0ExYnJrOEkyWXB1SDVlRURTTEVkV2hReGhCbXIvQVkvSzZVT3VkcnF3eWN2RDdsSVNERC9FdkdSYVBQdDBGM0kwbmFZM3hmYjlGNURDY2JnQTdIZGgyai9vTkg5THFhVFRrT3BQZ1IxM1d0NXFxR01MUlZkNWZXYzRLQjhPSFBEMTB4UXpsUlc5SSt0SVA1VHJTcSt0OVh4LS1PS2hTVDJHTlVlUGZRZmdTLS1JV2t4SnVyT2hYL1I2bWZ6bmQ5RFNRPT0=?cid=2331529927	Get hash	malicious	KnowBe4	Browse	18.173.205.50
	https://app.planable.io/review/0OPaw36t6M_k	Get hash	malicious	HTMLPhisher	Browse	18.66.137.147
	https://we.tl/t-fnebgmrnYQ	Get hash	malicious	Unknown	Browse	18.66.147.26
	https://www.dcamarketintelligence.com/tdt	Get hash	malicious	Unknown	Browse	18.66.121.183
	5.elf	Get hash	malicious	Unknown	Browse	19.198.191.156
	3.elf	Get hash	malicious	Unknown	Browse	19.16.45.206
	5.elf	Get hash	malicious	Unknown	Browse	19.160.246.202
CELANESE-US	Setup.exe.7z	Get hash	malicious	Unknown	Browse	159.223.101.159
	armv6l.elf	Get hash	malicious	Unknown	Browse	159.223.92.111
	System32.exe	Get hash	malicious	CryptOne, Mofksys, RedLine	Browse	159.223.34.114
	Josho.m68k.elf	Get hash	malicious	Unknown	Browse	159.223.216.80
	Josho.mpsl.elf	Get hash	malicious	Unknown	Browse	159.223.241.40
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	159.223.89.97
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse	159.223.89.97
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	159.223.89.97
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	159.223.89.97
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	159.223.89.97
DIGITALOCEAN-ASNUS	Setup.exe	Get hash	malicious	Unknown	Browse	161.35.127.181
	Setup.exe	Get hash	malicious	Unknown	Browse	161.35.127.181
	https://ctrk.klclick3.com/l/01JGXREPA9AKCFABSME4GFWDDZ_0#YWxhaW5femllZ2xlckB6aWVnbGVyZ3JvdXAuY29t	Get hash	malicious	Unknown	Browse	165.22.210.101
	http://www.jmclmedia.ph	Get hash	malicious	Unknown	Browse	206.189.225.178
	5.elf	Get hash	malicious	Unknown	Browse	157.245.182.61
	https://email.analystratings.net/ls/click?upn=u001.WeKo-2BCuHku2kJmVIsYmGxteRO-2BqdkFdZns7E8OZ0trgZRhaAY0f4dRd5bGXo8w1-2B5SPZj6mt6bkINmYNA1f4blf-2F2qp6pSrdQgqdtKPVZlFfsGiBd9L9S-2BVNmfUTaZ-2BpuOeo6wXhYyQnN5Dmhl9EwD4jJy2QucAxD5PJ8TFaAtq5-2Fa2JLywFyD22uAsFmhYjQLp65IuicFXReMolU22hvgQ-2B1S2bacC3gnzhuRxI8SAkOsPFFxOcYEiSSZTqVyp3m1OxPmLRrTi1o5-2FZom3YCyV1EUto77Rrvablg0dLCkGGW0ncnt-2B7IgK6LBBZRD7ITvGmpDjZtTYsz0I1qKiLzZdNfmubxarfJC5-2BcEqOw-2Ft-2FbdrugnVMUWHAHioUxjwvqr4QWKZSVt-2BeoNRvP2Adsk-2FRWXyTy-2FNsOG5tm8W5iiSHTNAe6b2ve-2F-2FMif4OPRLC2jk2zIHDBodMQqimJe7S-2B0c0a6VcurrTf-2BSSIJw1siTQylKaBjy96o6v7aWNACMPOJmDH5ybp8Hfg60OUEGx1ZLebRMpxX9k9AP7u40PlQ7YN0etELZUsiTbXY4PcX2P96RfnnTH8k4gdprbyM68BwIDNXqkSpWupXgXawXvLifC6eFYgMzHs5EFbgb5u6HEHo2__tUVFAbhJxF44ufbifaYzyYApcQooCC4WsuZoiwe419Oh5WFVYobMs1ROnIPWGGcL7zwYzcSR3guHWoKhXDu5EQ7SXJZpci4hCmpp1REa7W1YXEAS6JqnE9LrlFK998LZ271LMIRubQetxBOsHxh3FfsHQej0U45DqU0JnGYKUA9waD6Ny-2BL9vchurlVMDvBupSQHaqHAKs87lmzkMbvNLGI-2BMPx7o1UJrTBuhk-2BVx-2FdFVsZL4Uf2HUcBJTS73hyi	Get hash	malicious	Unknown	Browse	64.227.64.62
	https://email.analystratings.net/ls/click?upn=u001.WeKo-2BCuHku2kJmVIsYmGxteRO-2BqdkFdZns7E8OZ0trgZRhaAY0f4dRd5bGXo8w1-2B5SPZj6mt6bkINmYNA1f4blf-2F2qp6pSrdQgqdtKPVZlFfsGiBd9L9S-2BVNmfUTaZ-2Bp0zWbjdQ23pm6OHkVsvPYDi1myQ0pU4BHbfSebmhjQAIDDVMgAvG7Znw7Pr8RLFA8HEKUDF6j4JiiZ3slfATgGRu3-2BdlWbffHNdZW8UBc7QW6Nxd08b90zhz6-2FhInZrSp1J-2Fh9yU6gsolKI10c6pp1uA-2FrYRI2h9aMn65O5NvFrP-2Fc-2BjlCyvznYBIXNfkBGEguSmRbREbgogGbx0CjJc9kfZpcF-2F4T3W7floa7RxJ5-2BKjbFDYD7FnGxTCmOAt-2BDLn5J0y5KvJMT3qFWKyQo5DJ5ru0B7ksJyMiI6L18xz5XP2GRtxbC7dwfszL4xopys7uMk6wzOFXTrTU9jYi2ZvQxqCtOzUddy1WGVe8msfQF8x3k3Ejw4p6mGzrKR8wOZXnO3uVw5n8j0tNkc31-2F1y7FsWAGygTmAHNV4DJiUXG3-2Foq61jCXRLG1PMMCZ97ToDeMjE9XjfX-2Bb4NXrzqR3tgw-3D-3DrgFz_tUVFAbhJxF44ufbifaYzyYApcQooCC4WsuZoiwe419Oh5WFVYobMs1ROnIPWGGcLui8UPBZcrEcBQ64UpH2s9-2FDpSu9qfcgYFRQKTYsD5OOP7p7kgdevUOf60UO0BtzRorOOVdIMlEbf0g38VGeCmtkP8At2J-2BxKEtoZ2O48KqLdUMGUmxH4Esb-2BPRc25uZJoq4Qo0YWw9j31285luIdhLwnz-2B9RfofSABy36tB5aPmDcVeLn5C5N5AJkqjfepa6	Get hash	malicious	Unknown	Browse	188.166.17.21
	armv7l.elf	Get hash	malicious	Unknown	Browse	178.62.201.116
	https://email.analystratings.net/ls/click?upn=u001.WeKo-2BCuHku2kJmVIsYmGxteRO-2BqdkFdZns7E8OZ0trgBe3vvPhUi3NCctiT7ICCnQ-2FY8o5rhg4URlGJ-2FvsNaBLrMZH2YOUKWM-2BCE-2FXqUBn4SuSDNO43ZHONlcfV0u69WPaY48i3uh3m8lqIzkUcMcKGiml1g6PtP2N9Fq73ADmecSkBDQ1wDesGGu-2Bg3LC1PY31AnFBjTo5itfBoUzfV1y-2FNuV7ub4JBfgFfFwbfDCVw04z2QHPGmvaTuYBRiOw1Tpn5jhya1bpe-2FZKFIvw6DpoIa015fiQnAkr21qCIGDz3kcWaHiPPoAcEbgrIJQtXRwdHoKOAHjnLbHeTfYxioE2jQ-2BKzgO6L-2FLiLt79tmJXX2KYx8D6DTv7nI91sFKT8dXMJM0DazaslrneD4lIUneNyaGARqqUVvrSB7-2BzgxAL-2FuXFyd1qjf-2FnnaV5h661BgCBEWKyZBkPjSGhvc635VlrPtfR5g3T0pDVRqQ8o-2Fg4-3DfYwI_tUVFAbhJxF44ufbifaYzyYApcQooCC4WsuZoiwe419PER4av1iPHZIu7rMCH4g59O-2FpVm-2BPXLGfx0fQIDbM830SEyalx7CL7LS5G2wzbNPhsJ2FagkVeT-2FvL4PXhjlJE5YFKw59He2Ja9QVSEHwhUEJm-2BBDxFee6A4QFWAIxMlxI8kis-2B4bFFLDszJAKx313jD-2F4FRd82vUXuacU2lSKZ4Ah2gmv6sbaeoxYrNwq4bbw0e0DJ7EzH1nxfqSXJpTz	Get hash	malicious	Unknown	Browse	64.227.64.62
	3.elf	Get hash	malicious	Unknown	Browse	157.230.180.162
AMAZON-02US	https://na4.docusign.net/Signing/EmailStart.aspx?a=ffa78034-d960-4bb3-b2a2-bb62a1fc4a65&etti=24&acct=86dab687-685e-40aa-af52-e5c3fc07b508&er=04714c6d-cc25-4a21-be91-01e1c43a5f3f	Get hash	malicious	HTMLPhisher	Browse	44.239.30.202
	RJKUWSGxej.exe	Get hash	malicious	AgentTesla, RedLine	Browse	18.141.10.107
	TU0kiz3mxz.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	https://booking.extrantelabelason.com/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	18.245.31.49
	https://samantacatering.com/	Get hash	malicious	Unknown	Browse	99.86.4.125
	https://www.filemail.com/d/rxythqchkhluipl?skipreg=true	Get hash	malicious	Unknown	Browse	18.245.46.20
	vevhea4.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	file.elf	Get hash	malicious	Unknown	Browse	13.251.16.150
	file.elf	Get hash	malicious	Unknown	Browse	13.251.16.150
	file.elf	Get hash	malicious	Unknown	Browse	54.171.230.55

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
6a5d235ee78c6aede6a61448b4e9ff1e	http://pdfdrive.com.co	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://form.fillout.com/t/emEtLm993dus	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://www.tremendous.com/email/activate/yE_yBdRtyVv4Xqgg7hu_	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://lap.gnoqwwhpwe.ru/3aeK/#Dmestevao@iif.com	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://versyasist.website/sism.mp3	Get hash	malicious	HTMLPhisher	Browse	40.113.103.199
	http://11ofus.ca	Get hash	malicious	Unknown	Browse	40.113.103.199
	https://linkedln.contact/ugtxCQqLJUk?in/fuat-kirikci22-46d64297c/	Get hash	malicious	Unknown	Browse	40.113.103.199
	Remittance details.docx	Get hash	malicious	Unknown	Browse	40.113.103.199
	CEFA-FAS_LicMgr.exe	Get hash	malicious	Unknown	Browse	40.113.103.199
	http://4.lkx91.michaelhuegel.com/news?q=IP%20provider%20is%20blacklisted!%20MICROSOFT-CORP-MSN-AS-BLOCK	Get hash	malicious	Unknown	Browse	40.113.103.199

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\nsa731E.tmp\NSISFastLib.dll	https://veryfast.io/?ap=adw&as=g_d_fast_in&dm%5Bads%5D=new_static&dm%5Btype%5D=dis&gad_source=5&gclid=EAIaIQobChMIgp352NzmigMVZAOzAB0wMA8oEAEYASAAEgI_hfD_BwE	Get hash	malicious	Unknown	Browse
	Setup.exe.7z	Get hash	malicious	Unknown	Browse
	Setup.exe (1).zip	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
C:\Users\user\AppData\Local\Temp\nsa731E.tmp\Math.dll	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	https://veryfast.io/?ap=adw&as=g_d_fast_in&dm%5Bads%5D=new_static&dm%5Btype%5D=dis&gad_source=5&gclid=EAIaIQobChMIgp352NzmigMVZAOzAB0wMA8oEAEYASAAEgI_hfD_BwE	Get hash	malicious	Unknown	Browse
	Setup.exe.7z	Get hash	malicious	Unknown	Browse
	Setup.exe (1).zip	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_PcAppStore.exe_378681cfe1f53b5d7ed7d144ae7f543e1948fd6e_1182b65f_e9c27188-2e2e-42e0-8c23-e78c8a173432\Report.wer

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (2251), with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.5408685438806682
Encrypted:	false
SSDEEP:	192:w9WvlLU0OUp98+jPFpne0xsF1duu7Fe14lrJuoCm+Ygx5WIy:ddLPOUp98+jjKVuu7Fe14lrJVXgWIy
MD5:	418EF4AE5284CA6DB2AFD43AF59A89C7
SHA1:	CEBD3A2AFBAEC7F2BB19068A8B6A04609ACC72FE
SHA-256:	F6C5F83F3C93E7F90971847B6B133E1FC3AF8DB688CAFBF543D8F5004630F832
SHA-512:	6238A8AD4677CDFC2C450B9704C713B0FEFFAAA5296EBD2259AEE315AFBABEAD645FCBA3D70A8E5D046046908079DA1D7B84D0456BFCF4CD4F244B6038B6125D
Malicious:	false
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.8.0.9.9.6.2.1.6.3.3.7.4.6.3.9.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.8.0.9.9.6.2.1.8.3.1.5.4.6.5.5.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.e.9.c.2.7.1.8.8.-.2.e.2.e.-.4.2.e.0.-.8.c.2.3.-.e.7.8.c.8.a.1.7.3.4.3.2.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.9.6.e.c.8.a.2.a.-.d.f.8.b.-.4.b.2.7.-.a.e.5.c.-.8.e.d.8.5.b.a.8.f.5.6.4.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....N.s.A.p.p.N.a.m.e.=.P.c.A.p.p.S.t.o.r.e...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.P.C.A.p.p.S.t.o.r.e...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.a.2.c.-.0.0.0.1.-.0.0.0.e.-.8.f.9.d.-.a.2.9.a.7.3.6.3.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.f.a.0.8.2.b.8.1.c.e.9.b.5.d.3.f.8.9.f.3.8.7.9.b.5.0.d.4.2.8.e.a.0.0.0.0.0.9.0.4.!.0.0.0.0.3.7.b.f.c.a.3.2.a.9.8.3.f.2.c.1.3.b.0.a.b.e.4.e.d.0.8.4.f.b.1.0.0.7.2.1.1.1.e.2.!.P.c.A.p.p.S.t.o.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER.5b4f1fc2-e0d2-4ad2-af0f-0d7f9db3811e.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with very long lines (380), with CRLF line terminators
Category:	dropped
Size (bytes):	11818
Entropy (8bit):	3.745582535644215
Encrypted:	false
SSDEEP:	192:RHl7CwNzawaMKxaMy9IMLu9X9iaMy9IMLu9X9ca4lSE66Y36PQgmfjHYpr689b2I:RHlnNzawaMKxaMYIMINiaMYIMINca4Ak
MD5:	2BCF3511EF084FC8BDAB46D38A8A3CFA
SHA1:	1ADC1BA529D82A2B0E87FBA9C8B7538025ECCFAD
SHA-256:	CCF2F973E0C85198F076A71844D05BE19A44FDA7FAFD7BB97CE11791EEB288AF
SHA-512:	B750D994893542174C25C226C4F7383AACEB93B2E9CAC8AF4DAEF74AFDA1D9C2155421DA2E4BCFD83D4A152AD717327CADCA8E8268A972D7DDA81118D7EAE628
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.2.2.6.3.1.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.2.2.6.2.1...4.1.6.9...a.m.d.6.4.f.r.e...n.i._.r.e.l.e.a.s.e...2.2.0.5.0.6.-.1.2.5.0.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.4.1.6.9.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.1.0.3.3.<./.L.C.I.D.>.........<.B.u.i.l.d.L.a.y.e.r.s.>...........<.B.u.i.l.d.L.a.y.e.r. .L.a.y.e.r.N.a.m.e.=.".2.2.6.2.1...1...a.m.d.6.4.f.r.e...n.i._.r.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER.958ec57b-5132-406d-aa6f-8632c792d8b0.tmp.dmp

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Mini DuMP crash report, 16 streams, Fri Jan 10 15:23:37 2025, 0x1205a4 type
Category:	dropped
Size (bytes):	304224
Entropy (8bit):	1.6862083587984955
Encrypted:	false
SSDEEP:	1536:DukQ2ksXCqF9CHa2tDB8GvW8mjz40HFKGOE5re:DRQ2i69CHa2tDB8GvW8mjz40
MD5:	400C984941EFD9CED251B542033F3857
SHA1:	B12F77F92CF036C9AEB78424DDDFEF2C3496D89E
SHA-256:	A995A0D9B3A8CDA4D56BD6184B9AD8B4516A87E75AE4858C3FD577E9FAF4042B
SHA-512:	C9D0D60379ACF556F1CAD9176FFC34B9453754B347439B55C5A24EB29C0996E26D6599C9E2F89A6A60CB54936253AD62D5E28F985D55ECB1ADAE1F570E04ED15
Malicious:	false
Preview:	MDMP..]..... .......y;.g............d............#..............d.......$...............l.......8...........T...........(j..8:.........../...........0...........1..............................................................................gX.......1......Lw...............*.`....T.......,...r;.g.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .D.a.y.l.i.g.h.t. .T.i.m.e...........................................2.2.6.2.1...1...a.m.d.6.4.f.r.e...n.i._.r.e.l.e.a.s.e...2.2.0.5.0.6.-.1.2.5.0...........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d79ee133-9c99-4625-9250-1e3838bccce4.tmp.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (2272), with CRLF line terminators
Category:	dropped
Size (bytes):	7400
Entropy (8bit):	4.839456226967975
Encrypted:	false
SSDEEP:	192:uIpqy64+VM1HyL3/g9eT8OpByO7MsKVDk9cadsfKPnV3ywrWwV7:8XfdV5WwV7
MD5:	36EB28FB0257C86CF7930CB3529B8F38
SHA1:	D0E40522D74C064C2192FC9B1CCD8E4953D20831
SHA-256:	220C408E264A8D4B73F395C0A302179B40534840486B172AD120E1FEAABC57BB
SHA-512:	9E9F45D17F98F250D0E64A44639E066E9BD4AF4F894E1686A9146F9156A0A5ACFB9E8F5203CC77177FC5FA97E93FDBAF91AC9A1AEF831F728C555B2BE604A7BD
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="22631" />.. <arg nm="vercsdbld" val="4169" />.. <arg nm="verqfe" val="4169" />.. <arg nm="csdbld" val="4169" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="1033" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="45913" />.. <arg nm="osinsty" val="2" />.. <arg nm="iever" val="11.1.22621.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2OIDBQCM\p[1].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2OIDBQCM\p[2].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2OIDBQCM\p[3].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2OIDBQCM\p[4].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4TJ1LROY\p[1].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4TJ1LROY\p[2].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4TJ1LROY\p[3].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4TJ1LROY\p[4].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KA259YPD\p[1].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KA259YPD\p[2].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KA259YPD\p[3].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KA259YPD\p[4].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V4I0JG8P\p[1].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V4I0JG8P\p[2].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V4I0JG8P\p[3].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V4I0JG8P\p[4].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Temp\nsa731E.tmp\Math.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	69120
Entropy (8bit):	6.024967061017882
Encrypted:	false
SSDEEP:	1536:GUZ9QC7V7IGMp2ZmtSX5p9IeJXlSM2tS:T97WSth5lwt
MD5:	85428CF1F140E5023F4C9D179B704702
SHA1:	1B51213DDBAEDFFFB7E7F098F172F1D4E5C9EFBA
SHA-256:	8D9A23DD2004B68C0D2E64E6C6AD330D0C648BFFE2B9F619A1E9760EF978207A
SHA-512:	DFE7F9F3030485CAF30EC631424120030C3985DF778993342A371BF1724FA84AA885B4E466C6F6B356D99CC24E564B9C702C7BCDD33052172E0794C2FDECCE59
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: Setup.exe.7z, Detection: malicious, Browse Filename: Setup.exe (1).zip, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........w.................F.........................5.....5....:6....Rich...........PE..L.....Oa...........!................KG....................................................@.............................B.......(....................................................................................................................text...b........................... ..`.rdata..R...........................@..@.data............2..................@....reloc..............................@..B................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsa731E.tmp\NSISFastLib.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	140288
Entropy (8bit):	6.334087823000165
Encrypted:	false
SSDEEP:	3072:H5dnvmOEATceozVDkRasOCdUFZrR7beB2SK0XCC+W/ST+BeXZQUC5:ZdnvmsTceZUtCdUFZr9b4KznC5
MD5:	9C7A4D75F08D40AD6F5250DF6739C1B8
SHA1:	793749511C61B00A793D0AEA487E366256DD1B95
SHA-256:	6EB17C527C9E7F7FEA1FDB2EA152E957B50A56796E53CE1E5946B165B82DEAEF
SHA-512:	E85235307B85FFD3AAB76FF6290BEE0B3B9FD74C61A812B5355FE7B854D4C6B77BD521E52638D28E249A43D9EC7AA6F2670AF2B1C671091492C7FE19D6F9A4E6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: , Detection: malicious, Browse Filename: Setup.exe.7z, Detection: malicious, Browse Filename: Setup.exe (1).zip, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$......../.iTN.:TN.:TN.:.6.;^N.:.6.;.N.:.6.;@N.:.6.;UN.:...;AN.:...;DN.:...;{N.:.6.;_N.:TN.:'N.:B..;QN.:B..;UN.:B.%:UN.:TNM:UN.:B..;UN.:RichTN.:........................PE..L...z..f...........!...(.x...................................................`..............................................x...x....0..X....................@......0...............................p...@............................................text...0v.......x.................. ..`.rdata..\~...........\|..............@..@.data...............................@....rsrc...X....0......................@..@.reloc.......@......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsa731E.tmp\System.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	5.814115788739565
Encrypted:	false
SSDEEP:	192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5:	CFF85C549D536F651D4FB8387F1976F2
SHA1:	D41CE3A5FF609DF9CF5C7E207D3B59BF8A48530E
SHA-256:	8DC562CDA7217A3A52DB898243DE3E2ED68B80E62DDCB8619545ED0B4E7F65A8
SHA-512:	531D6328DAF3B86D85556016D299798FA06FEFC81604185108A342D000E203094C8C12226A12BD6E1F89B0DB501FB66F827B610D460B933BD4AB936AC2FD8A88
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......qr.5.D.5.D.5.D...J.2.D.5.E.!.D.....2.D.a0t.1.D.V1n.4.D..3@.4.D.Rich5.D.........PE..L.....Oa...........!....."..................@...............................p............@..........................B.......@..P............................`.......................................................@..X............................text.... .......".................. ..`.rdata..c....@.......&..............@..@.data...x....P.......*..............@....reloc.......`.......,..............@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsa731E.tmp\image.gif

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	997
Entropy (8bit):	4.188896534234179
Encrypted:	false
SSDEEP:	12:2E5KZbHOjOruFw6MLxENScRVar7FC53tK1Oqd3Aa0n:tAlHOjOX60ENvRVZKbEn
MD5:	1636218C14C357455B5C872982E2A047
SHA1:	21FBD1308AF7AD25352667583A8DC340B0847DBC
SHA-256:	9B8B6285BF65F086E08701EEE04E57F2586E973A49C5A38660C9C6502A807045
SHA-512:	837FA6BCBE69A3728F5CB4C25C35C1D13E84B11232FC5279A91F21341892AD0E36003D86962C8AB1A056D3BEEB2652C754D51D6EC7EEE0E0EBFE19CD93FB5CB0
Malicious:	false
Preview:	GIF89a............P..........4q...5j...O..F.].......................o..._.....5y.t........\....K>}...g..t....X...B..ET....t~....go..Jx...........\|..U!f.\|....>u.M.........w>..+r...\|...A{.....t...E...b.8}....d....A.....R..y..l...w....G5u...{....t.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..NETSCAPE2.0.....!.......,...............H..A....`pp....~.xR......d.......,...D...)2 .1.....N` R......(@......,8RDA../..XB....P.F .....#...b`F...#8p......<\.`.........A....n\|.CH...........+... .E.....d`.@......;

C:\Users\user\AppData\Local\Temp\nsa731E.tmp\inetc.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	4.684597989866362
Encrypted:	false
SSDEEP:	384:njt65uI9oYzcCaHjl9Cb4I1f0AGhrHXoREnRxtIpH/u0abJ2v2DW9O9tk8ZwkpwD:noHtNQoRSIwTJB6Q/kPyBp6
MD5:	A35CDC9CF1D17216C0AB8C5282488EAD
SHA1:	ED8E8091A924343AD8791D85E2733C14839F0D36
SHA-256:	A793929232AFB78B1C5B2F45D82094098BCF01523159FAD1032147D8D5F9C4DF
SHA-512:	0F15B00D0BF2AABD194302E599D69962147B4B3EF99E5A5F8D5797A7A56FD75DD9DB0A667CFBA9C758E6F0DAB9CED126A9B43948935FE37FC31D96278A842BDF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........&.[.H.[.H.[.H.O.I.R.H.[.I...H...M.Y.H...L.Z.H...H.Z.H.....Z.H...J.Z.H.Rich[.H.................PE..L...n..c...........!.....T.........._........p............................... ............@..........................x......D...d...............................t....w..8...............................................D............................text....S.......T.................. ..`.rdata.......p.......X..............@..@.data....i...........d..............@....idata..A............v..............@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsa731E.tmp\nsJSON.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	24064
Entropy (8bit):	5.819708895488079
Encrypted:	false
SSDEEP:	384:n7U5CiIZ1ZC2RvhrTfldNuwQ5pk+BISivMyyOgqCoRUj+OvHxOuofnykhVQJrTU:YoZ1ZnhrTfldqk7Yyy94RxOcVQJrT
MD5:	F4D89D9A2A3E2F164AEA3E93864905C9
SHA1:	4D4E05EE5E4E77A0631A3DD064C171BA2E227D4A
SHA-256:	64B3EFDF3DE54E338D4DB96B549A7BDB7237BB88A82A0A63AEF570327A78A6FB
SHA-512:	DBDA3FE7CA22C23D2D0F2A5D9D415A96112E2965081582C7A42C139A55C5D861A27F0BD919504DE4F82C59CF7D1B97F95ED5A55E87D574635AFDB7EB2D8CADF2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......U.'..fI_.fI_.fI_3.H^.fI_.fH_?fI_.8M^.fI_.8I^.fI_.8._.fI_.8K^.fI_Rich.fI_........PE..L...`..Z...........!.....>..........E........P............................................@..........................X......@Z..P....p..........................H....X...............................................P...............................text...W<.......>.................. ..`.rdata.......P.......B..............@..@.data...@....`.......R..............@....rsrc........p.......T..............@..@.reloc..H............X..............@..B........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	1334568
Entropy (8bit):	7.986254266678823
Encrypted:	false
SSDEEP:	24576:KYtaZDBJa3RXAbOeOHIpkhjvAfx2JJh4i5zAhO983wq:3taDqAyp+MvYWJFZAhO94wq
MD5:	FFF2189ADE42336854F53C8D2BD5A0E5
SHA1:	40CE7C63C37C71D022449F646E80ABCFA0164DBC
SHA-256:	941EA39DCAD1ACF36C2AD3DC0BAA965CE6E98237331F0C581185545AA522E9F0
SHA-512:	6198E1F403221CA341453B4BD4A4D1EB242E5BAE4ABB5BF54770608AE045C16BFE04664BEDFF3D76C52FA8350DB8EF413F6F913F52DC0BE976EC830E77A17B56
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 35%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf.sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....Oa.................h...*......@6............@..........................`............@..........................................................3..X)...........................................................................................text...vf.......h.................. ..`.rdata...............l..............@..@.data...x...........................@....ndata... ...............................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsf72A0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	DIY-Thermocam raw data (Lepton 3.x), scale 0-0, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 8589934592.000000
Category:	dropped
Size (bytes):	5020397
Entropy (8bit):	6.124012528550105
Encrypted:	false
SSDEEP:	49152:nGSMI+Ptv2A83Q5meGSmMk/DCTkB5w01LwY194FcZvhISBtkRR0XJPeKeNtD8:nGjNr5cck1Lj8skRwWP18
MD5:	EA143134618B838CDDE23561DCAD4388
SHA1:	CAD015D688C464A3BBF6B94C931F6F36778BED9B
SHA-256:	FB5DFFAB551C0E46483EA5A1759C36B26037B3DC60486C834565BA172BB5D4DC
SHA-512:	C9F4AD721CC5F79EA380808372F96A21066798FFBBD7EC3EA769041E8373ABAF32486A14399338568A239FCCF37D119C971F67A2F1E9FB1407557B823C64334E
Malicious:	false
Preview:	6.......,.......,.......D...]...p...............................................................................S...........................................................................................................................................................................3................&..................................................................................................................................j.......................l...................................................................................................................Y...........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\NSISFastLib.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	140288
Entropy (8bit):	6.334087823000165
Encrypted:	false
SSDEEP:	3072:H5dnvmOEATceozVDkRasOCdUFZrR7beB2SK0XCC+W/ST+BeXZQUC5:ZdnvmsTceZUtCdUFZr9b4KznC5
MD5:	9C7A4D75F08D40AD6F5250DF6739C1B8
SHA1:	793749511C61B00A793D0AEA487E366256DD1B95
SHA-256:	6EB17C527C9E7F7FEA1FDB2EA152E957B50A56796E53CE1E5946B165B82DEAEF
SHA-512:	E85235307B85FFD3AAB76FF6290BEE0B3B9FD74C61A812B5355FE7B854D4C6B77BD521E52638D28E249A43D9EC7AA6F2670AF2B1C671091492C7FE19D6F9A4E6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$......../.iTN.:TN.:TN.:.6.;^N.:.6.;.N.:.6.;@N.:.6.;UN.:...;AN.:...;DN.:...;{N.:.6.;_N.:TN.:'N.:B..;QN.:B..;UN.:B.%:UN.:TNM:UN.:B..;UN.:RichTN.:........................PE..L...z..f...........!...(.x...................................................`..............................................x...x....0..X....................@......0...............................p...@............................................text...0v.......x.................. ..`.rdata..\~...........\|..............@..@.data...............................@....rsrc...X....0......................@..@.reloc.......@......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\System.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	5.814115788739565
Encrypted:	false
SSDEEP:	192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5:	CFF85C549D536F651D4FB8387F1976F2
SHA1:	D41CE3A5FF609DF9CF5C7E207D3B59BF8A48530E
SHA-256:	8DC562CDA7217A3A52DB898243DE3E2ED68B80E62DDCB8619545ED0B4E7F65A8
SHA-512:	531D6328DAF3B86D85556016D299798FA06FEFC81604185108A342D000E203094C8C12226A12BD6E1F89B0DB501FB66F827B610D460B933BD4AB936AC2FD8A88
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......qr.5.D.5.D.5.D...J.2.D.5.E.!.D.....2.D.a0t.1.D.V1n.4.D..3@.4.D.Rich5.D.........PE..L.....Oa...........!....."..................@...............................p............@..........................B.......@..P............................`.......................................................@..X............................text.... .......".................. ..`.rdata..c....@.......&..............@..@.data...x....P.......*..............@....reloc.......`.......,..............@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\image.gif

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	997
Entropy (8bit):	4.188896534234179
Encrypted:	false
SSDEEP:	12:2E5KZbHOjOruFw6MLxENScRVar7FC53tK1Oqd3Aa0n:tAlHOjOX60ENvRVZKbEn
MD5:	1636218C14C357455B5C872982E2A047
SHA1:	21FBD1308AF7AD25352667583A8DC340B0847DBC
SHA-256:	9B8B6285BF65F086E08701EEE04E57F2586E973A49C5A38660C9C6502A807045
SHA-512:	837FA6BCBE69A3728F5CB4C25C35C1D13E84B11232FC5279A91F21341892AD0E36003D86962C8AB1A056D3BEEB2652C754D51D6EC7EEE0E0EBFE19CD93FB5CB0
Malicious:	false
Preview:	GIF89a............P..........4q...5j...O..F.].......................o..._.....5y.t........\....K>}...g..t....X...B..ET....t~....go..Jx...........\|..U!f.\|....>u.M.........w>..+r...\|...A{.....t...E...b.8}....d....A.....R..y..l...w....G5u...{....t.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..NETSCAPE2.0.....!.......,...............H..A....`pp....~.xR......d.......,...D...)2 .1.....N` R......(@......,8RDA../..XB....P.F .....#...b`F...#8p......<\.`.........A....n\|.CH...........+... .E.....d`.@......;

C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\inetc.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	4.684597989866362
Encrypted:	false
SSDEEP:	384:njt65uI9oYzcCaHjl9Cb4I1f0AGhrHXoREnRxtIpH/u0abJ2v2DW9O9tk8ZwkpwD:noHtNQoRSIwTJB6Q/kPyBp6
MD5:	A35CDC9CF1D17216C0AB8C5282488EAD
SHA1:	ED8E8091A924343AD8791D85E2733C14839F0D36
SHA-256:	A793929232AFB78B1C5B2F45D82094098BCF01523159FAD1032147D8D5F9C4DF
SHA-512:	0F15B00D0BF2AABD194302E599D69962147B4B3EF99E5A5F8D5797A7A56FD75DD9DB0A667CFBA9C758E6F0DAB9CED126A9B43948935FE37FC31D96278A842BDF
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........&.[.H.[.H.[.H.O.I.R.H.[.I...H...M.Y.H...L.Z.H...H.Z.H.....Z.H...J.Z.H.Rich[.H.................PE..L...n..c...........!.....T.........._........p............................... ............@..........................x......D...d...............................t....w..8...............................................D............................text....S.......T.................. ..`.rdata.......p.......X..............@..@.data....i...........d..............@....idata..A............v..............@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\modern-wizard.bmp

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PC bitmap, Windows 3.x format, 164 x 314 x 4, image size 26376, resolution 2834 x 2834 px/m, cbSize 26494, bits offset 118
Category:	dropped
Size (bytes):	26494
Entropy (8bit):	1.9568109962493656
Encrypted:	false
SSDEEP:	24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5:	CBE40FD2B1EC96DAEDC65DA172D90022
SHA1:	366C216220AA4329DFF6C485FD0E9B0F4F0A7944
SHA-256:	3AD2DC318056D0A2024AF1804EA741146CFC18CC404649A44610CBF8B2056CF2
SHA-512:	62990CB16E37B6B4EFF6AB03571C3A82DCAA21A1D393C3CB01D81F62287777FB0B4B27F8852B5FA71BC975FEAB5BAA486D33F2C58660210E115DE7E2BD34EA63
Malicious:	false
Preview:	BM~g......v...(.......:............g..................................................................................DDD@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDD@@@@@@..DDD....DDDDDD........................................DDDDDDDDDD....DDDDDDDDD........DD@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDD@@@@DDDDDDDDDD@@@@@@D..DD....DDDDDDD......................................DDDDDDDDDD....DDDDDDDDDD......D..D@@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDDD@@@@@DDD..D.....DDDDDD......................................DDDDDDDDD.....DDDDDDDDD......DDD..@@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDDD@@@@@@DDDD.......DDDDDD.....................................DDDDDDDDDD....DDDDDDDDDD.....DDDDD..@@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDD@@@@@@DDDDDD.......DDDDDD....................................DDDDDDDDD....DDDDDDDDDD......DDDDDD..@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\nsDialogs.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	9728
Entropy (8bit):	5.158136237602734
Encrypted:	false
SSDEEP:	96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
MD5:	6C3F8C94D0727894D706940A8A980543
SHA1:	0D1BCAD901BE377F38D579AAFC0C41C0EF8DCEFD
SHA-256:	56B96ADD1978B1ABBA286F7F8982B0EFBE007D4A48B3DED6A4D408E01D753FE2
SHA-512:	2094F0E4BB7C806A5FF27F83A1D572A5512D979EEFDA3345BAFF27D2C89E828F68466D08C3CA250DA11B01FC0407A21743037C25E94FBE688566DD7DEAEBD355
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......\|..c8O`08O`08O`08Oa0.O`0.@=05O`0llP0=O`0.If09O`0.od09O`0Rich8O`0........PE..L.....Oa...........!.........0......g........0............................................@..........................6..k....0.......p...............................................................................0...............................text............................... ..`.rdata..{....0......................@..@.data...h!...@......................@....rsrc........p....... ..............@..@.reloc..~............"..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsyBAD.tmp\nsJSON.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	24064
Entropy (8bit):	5.819708895488079
Encrypted:	false
SSDEEP:	384:n7U5CiIZ1ZC2RvhrTfldNuwQ5pk+BISivMyyOgqCoRUj+OvHxOuofnykhVQJrTU:YoZ1ZnhrTfldqk7Yyy94RxOcVQJrT
MD5:	F4D89D9A2A3E2F164AEA3E93864905C9
SHA1:	4D4E05EE5E4E77A0631A3DD064C171BA2E227D4A
SHA-256:	64B3EFDF3DE54E338D4DB96B549A7BDB7237BB88A82A0A63AEF570327A78A6FB
SHA-512:	DBDA3FE7CA22C23D2D0F2A5D9D415A96112E2965081582C7A42C139A55C5D861A27F0BD919504DE4F82C59CF7D1B97F95ED5A55E87D574635AFDB7EB2D8CADF2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......U.'..fI_.fI_.fI_3.H^.fI_.fH_?fI_.8M^.fI_.8I^.fI_.8._.fI_.8K^.fI_Rich.fI_........PE..L...`..Z...........!.....>..........E........P............................................@..........................X......@Z..P....p..........................H....X...............................................P...............................text...W<.......>.................. ..`.rdata.......P.......B..............@..@.data...@....`.......R..............@....rsrc........p.......T..............@..@.reloc..H............X..............@..B........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\temp

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Fri Nov 29 15:13:24 2024, mtime=Fri Jan 10 14:23:29 2025, atime=Fri Nov 29 15:13:24 2024, length=3528024, window=hide
Category:	dropped
Size (bytes):	1857
Entropy (8bit):	3.5279038328210097
Encrypted:	false
SSDEEP:	24:8j/yWP9gzyAkwRXmwtkkF+iO/7g1/Ykvsm:8LPP9GRkeXmOF+ipFYkU
MD5:	B58CC507CFF86C971CC5A2D3D3823AB5
SHA1:	6580AF4DE493254F51E1E1A53C6ADBC2A962BDAF
SHA-256:	518322CE3C318FF2F823A67DBD7CAB15F8D19B41DB055362BF6756018DBAECE9
SHA-512:	E77ED9B987FBFB6A3CE5DA1517484DE34DF6C38E173B5C265336670CCDEFD1F16EAC9AA914D8BB88C025C14ABB437A53774F1585D2530B5492126440C9F3D0E5
Malicious:	false
Preview:	L..................F.@.. .......yB...y3.sc......yB..X.5.....................0.:..IG..Yr?.D..U..k0.&...&......p...eJ..>..sc..N...sc......t...CFSF..1.....Z.z..PCAPPS~1....t.Y^...H.g.3..(.....gVA.G..k...F......Z.zZ.z..............................P.C.A.p.p.S.t.o.r.e...D.j.2.X.5.}Y.. .PCAPPS~1.EXE..N......}Y..Z.z..............................P.c.A.p.p.S.t.o.r.e...e.x.e.......W...............-.......V...........QO.......C:\Users\user\PCAppStore\PcAppStore.exe..+.....\.....\.....\.....\.....\.....\.P.C.A.p.p.S.t.o.r.e.\.P.c.A.p.p.S.t.o.r.e...e.x.e...C.:.\.U.s.e.r.s.\.M.a.o.g.a.\.P.C.A.p.p.S.t.o.r.e.../.i.n.i.t. .d.e.f.a.u.l.t. .s.h.o.w.M.(.C.:.\.U.s.e.r.s.\.M.a.o.g.a.\.P.C.A.p.p.S.t.o.r.e.\.p.c.a.p.p.s.t.o.r.e...i.c.o.........%USERPROFILE%\PCAppStore\pcappstore.ico.............................................................................................................................................................................................................................%

C:\Users\user\PCAppStore\AutoUpdater.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	601944
Entropy (8bit):	6.427510350624658
Encrypted:	false
SSDEEP:	12288:xYnWC7sQB/cA4nLrtkWemCn9YxjxXXaPJ:W7sDLRkWeRngjxXXaB
MD5:	89C252ED3ACFC38795D5B8A04114613C
SHA1:	8ED072E8650CA2862210B591AFCF5982E27E0862
SHA-256:	7D8738A794B245F07311A8D04FA83237430B9ECBBA37B421B33C5912477240FF
SHA-512:	D19B20A4BFF94D4B321F11F53D9C0E6032A4EAA28A13A6797BD3C7097601C1BF0D897464446700F2CB35E8BCC4A25F46772FAC2C8339AC8BFCAAFA5E1BC02C58
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 8%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............................f....f....f...............g.....gH.... ....g....Rich...........PE..d.....Ig.........."....).......................@.............................P......t.....`.................................................P...........h....P..PR......X)...@......P...T.......................(.......@............................................text............................... ..`.rdata...m.......n..................@..@.data....<....... ..................@....pdata..PR...P...T... ..............@..@.rsrc...h............t..............@..@.reloc.......@......................@..B................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\PcAppStore.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	3528024
Entropy (8bit):	6.000445840704439
Encrypted:	false
SSDEEP:	49152:x2A83Q5meGSmMk/DCTkB5w01LwY194FcZvhISz:H5cck1Lj8y
MD5:	A4EA4FFE8FF33279682195AFC6CEBC70
SHA1:	37BFCA32A983F2C13B0ABE4ED084FB10072111E2
SHA-256:	44C1976EC264B0A9856ACE283F4EE84D8C60578B3F7766309F67B99DF13F4764
SHA-512:	EE6486B1D2F6E404C5F49E3B1E3308F4D8E6324247DEA15F3C0AA4F8836DC372A0C78543C379C200025023492B6327214CA18BB62C7BFE3FAAC84B7C17A9EF7E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 17%
Preview:	MZ......................@...................................0...........!..L.!This program cannot be run in DOS mode....$........r.............k..6...........k7..................k......k......k......k.....................................[.......3............Rich............................PE..d.....Ig.........."....).v...........%........@..............................6..... .6...`..................................................70.......5......p3.8P....5.X)....6..,....-.p.....................-.(.....-.@...........................................text...~t......v................. ..`.rdata..............z.............@..@.data........p0..4...R0.............@....pdata..8P...p3..R....2.............@..@.rsrc.........5.......4.............@..@.reloc...,....6......~5.............@..B................................................................................................................................................................................................

C:\Users\user\PCAppStore\ReadMe.txt

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	146
Entropy (8bit):	4.577360416859904
Encrypted:	false
SSDEEP:	3:TKPyFfliFRNAl2sIaRjyM1KOTxLELMZ4MKLJF8EelYq8AsXJVVWM4v:TyyFflmSssI+j1NLELM6MKn8EquZVVCv
MD5:	2845450EA9D938CFEA9809CA0C827F12
SHA1:	8DE2189530DA5923365436C37E4C55C500AC3FBF
SHA-256:	7FDADB3CA5B81C6D1C58A20610921BF89D63DC65B77BE982F422C6FD2A13F166
SHA-512:	7D19FE6E9DD51BB880FD6FBB7EE126C8078771EE5166D53F312B04D117CE2897CBB6DFB5E5627314C3CF8B56F7A2BBF5B9D38258E7912B0AC5D420B611B7C363
Malicious:	false
Preview:	Fhis folder contains the PC App Store for Microsoft Windows.....For additional information, please visit https://pcapp.store/?p=lpd_appstore-faq..

C:\Users\user\PCAppStore\Temp\tempPOSTData

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	JSON data
Category:	dropped
Size (bytes):	2258
Entropy (8bit):	5.142169109445304
Encrypted:	false
SSDEEP:	48:YZ1HdNCyDF9uteZMh8ZofcjFfHi3TKIyRf8feGy6WHv+wUhN+FZ6yxmfskM9OmOI:oNdbi+MaZoEFPiDnyRkfeGy6WHv+wUhS
MD5:	02F842155FD40E08BDEC501FF57858FE
SHA1:	816BEE3547ECACB2A1DA158475AA061879A7E858
SHA-256:	C6EE41436CE6076B515C65FADD89DE264FBF639A66E264689E960F3D4838FA90
SHA-512:	D3D74D4F6CEF0E232DE4318E2671DADFE6CDD5C6C77AC9640FDEA0D35F51454F6DEA70901663ED80A02EBECA2CD959805D03F3D99371549B0CC25C0CD8C8E0C1
Malicious:	false
Preview:	{"system_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"2","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"XXR39DW","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"CBXGDNG4+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20240819000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+24%2E09+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2021+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Minimum+Runtime+-+14%2E42%2E34433","5":"Office+16+Click-to-Run+Licensing+Component","6":"Office+16+Click-to-Run+Extensibility+Component","7":"Adobe+Acrobat+%2864-bit%2

C:\Users\user\PCAppStore\Temp\tempPOSTResponse

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	JSON data
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.089026662492467
Encrypted:	false
SSDEEP:	3:YGVE8fptxgDQLRv6zjQJNRvUXZ5:YGFRt9IoNaZ5
MD5:	3024A54E0C352ABE5EB5F753CA4828DA
SHA1:	DF0206851654405C8E5C2D3BC96FB536B8C2DCBF
SHA-256:	3CD0A703506C7394D6115D9FF721516560894358AEF07459F30D8930DF6C3B61
SHA-512:	D9D44051DF56B29AA596EE38463B781DBE27F917F7DAE1B2420122616DA108520429DDA58C75C7E6B2D41093F83C5A4BAE96024885AF3956F23A3CE5BD3F9358
Malicious:	false
Preview:	{"cpg":"default","inst_excl":null,"inst_addon":null,"inst_advanced":null}

C:\Users\user\PCAppStore\Uninstaller.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	109144
Entropy (8bit):	7.1980655519896555
Encrypted:	false
SSDEEP:	3072:kfY/TU9fE9PEtulB0sm0UCh1XkcSRO7xffQc8QDzU7n:yYa6Paswc1XjnffyQDo7n
MD5:	8C317EBC2F81DC3030784A63C53E7969
SHA1:	A76FBB1C6EBE09F755FBB61AD23BC4CC1C1E1F63
SHA-256:	7934EEAE2A3C0473FC9F24DDC6C8DAF67E6B78C1696BCFDF34CD1BB1C9E41494
SHA-512:	3809D5F02F41EE20A5AA90A07AF77B59A1CD95353E72DFF5BA600BB69EF145B23C314D277B68C46C6F443229CA2311A7316BDBF0DCD97437D442E43EAE16FE80
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 26%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf.sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....Oa.................h...*......@6............@..........................`............@.............................................................X)...........................................................................................text...vf.......h.................. ..`.rdata...............l..............@..@.data...x...........................@....ndata... ...............................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\Watchdog.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	293720
Entropy (8bit):	6.344969974625324
Encrypted:	false
SSDEEP:	3072:gmTGizQ8x11SwEpAgNQlTkGixObSY1QNwfeaa1m3XXz7pzGgQd3zsobQZFRaY0WJ:wizpzqISWawfVj3nzdGMiYtas+K
MD5:	FCD21F8A189F9427083D19AD84FE7FF9
SHA1:	F600A41649F53D3350DBAB4F19927E20E3D92871
SHA-256:	F1E12ADD6FE3885608AF8E5A9E61716DCE1F045E7BA99456EDF7B5649A1C2724
SHA-512:	9C6E9CE189E79AB178265E81D986713485A37F8925DE583C5A21A8A8E91853B3B279BEBEB54FC8A984D2B1C10CF92FFA57B8673827D8EBAD69266CB21E1EE7BB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 17%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........P^...^...^.......[..............T...N...W...N...N...N...`.......S...^...........\......._...^.m._......._...Rich^...........................PE..d.....Ig.........."....).............2.........@....................................i5....`.................................................@...x.......h........2...R..X)...........N..p....................P..(...@M..@............................................text............................... ..`.rdata..v...........................@..@.data....%..........................@....pdata...2.......4..................@..@.rsrc...h...........................@..@.reloc...............J..............@..B................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\cache\windows_setup.json

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	ASCII text, with very long lines (1000), with no line terminators
Category:	modified
Size (bytes):	1000
Entropy (8bit):	5.542850783363727
Encrypted:	false
SSDEEP:	24:jgsCchjVjwXA8zyqYJkh7ik7ze+ZXkSTtd2OAKlKis83A1:jgzcLjv8vIc7ikHXXk66KlKiM1
MD5:	604A16C2F70E17055F76C7C7F1222E10
SHA1:	B2B4994FC365487AF6FCFDB4527315E131847C70
SHA-256:	22869AE1E6B271D1056C0E842BCA7F67AA499042570700AF1CC911ECD9E78199
SHA-512:	5E9889B8B319F82CEA3EAE37301D5DE924C4DB003AED2C0CA7BB4427C628F26573BA28435545361BA5606679BA6723AB1A9AFA34A9AB9C48BC0F728AC8B44AC2
Malicious:	false
Preview:	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

C:\Users\user\PCAppStore\pcappstore.ico

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	32038
Entropy (8bit):	5.431378038504933
Encrypted:	false
SSDEEP:	384:UGauOOFjcJlokq0Wbn3P3U9VA0N5YPWRss7o3nkrk:jPFwq0WbfU9VA0sp
MD5:	EE33610B997D7705364AD909CF5D7909
SHA1:	0093B630BF297952E7FEE78ED21F8BF812E9B436
SHA-256:	11C2CA92834C4BEE2A331B3DAF14679B4B9D7DD32430FEF702B503A8CE96F8B1
SHA-512:	B2ADD74DF99BE5CD012AB767DF0274E87E5D9C35D360E3FF71C13C3880857C72B24DF0CDF1EF5123F006F603E6A5C87556B52646B305ABDD65D0A4F685C58A41
Malicious:	false
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... ................................g...................................................g.......g...........................................................g....................................................................................................................................................................................................................................................................................................................................v..x................x..x.............................~..c..T..............T..c...........................W..\|'..V..................U..\|'..W........................)..w.......................x...)........................}...~.......................~...}.............................~...........................~..............................~..w..........................w..~.......

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	786432
Entropy (8bit):	3.5280990163417747
Encrypted:	false
SSDEEP:	3072:4g5Vc/e5MJ3ULUqXYrcvAjC5KzJyd9dhjLy5Pf2JAOGFuYVTHGHC7+7bNjJrWk3g:4gMPc4jC5KzJyd9dhjLy5n2sx2K
MD5:	DB7AAC04FEE64A39D60A034B39279D23
SHA1:	F9CACFED06DA1A26E56669E031384DC73D91D805
SHA-256:	C43888AEF568B73EC2F4D89A525F5CC615578707DDAF6C9EDE6ABC0B62698EDE
SHA-512:	A36F13EBE7B7358F0B8BB654151B0DE1616F113DFE3DD39A768D9D04B8C9434F4865187462067C847C2594A9D6CDDBF639DAEFE92AD4C160A74BA44D3B8FA721
Malicious:	false
Preview:	regfn...n...w.k.eJ.................. ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e......X.......n......X.......n..........X.......n...rmtm....sc.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14408)
Category:	downloaded
Size (bytes):	454708
Entropy (8bit):	5.629932084464815
Encrypted:	false
SSDEEP:	6144:F40AiF9yIJDtxaRvGXUskxzNM8x2wE3OPoKWUB4m72jAYqmf0:e0JxJZ4RUINM8AeTN7vmc
MD5:	7C9EFBFD647CE2566560B15493ED19D0
SHA1:	C598387DBA113B7DF8FE92C010A02A00F64E7F74
SHA-256:	C2E1D1E4D9C66588FC6A0F98B02656F128B99B04D1060177A523E66C6304FC2C
SHA-512:	A69C962584A0AE8C774A7D86A686261763C82366D8C5F0EE0DEF470DC18D9D18E2B18F3E85D1DAA127083E9A2C5716A52F6B36C1EE9E2FAAC7CB67F58C03400B
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-VFQWFX3X1C
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":39,"vtp_rules":["list","pcapp\\.store","pcappstore\\.download"],"tag_id":11},{"function":"__ogt_ga_send","priority":29,"vtp_value":true,"tag_id":13},{"function":"__ogt_referral_exclusion","priority":29,"vtp_includeConditions":["list","veryfast\\.io"],"tag_id":14},{"function":"__ogt_session_timeout","priority":29,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":29,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionTy

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	514
Entropy (8bit):	5.185232299278913
Encrypted:	false
SSDEEP:	12:6/swcTKWNccWGRvcWX5Yook/4cyBCbRr8Nc5uBR8YGnqW/i:KSKWNPBBtXWVRIN8NBBR8YGnqki
MD5:	C4B9E8C998D90680459CA4F8F7338D2C
SHA1:	BA1BAD0D8A63BE15CFF654D5142FCA7C4127C823
SHA-256:	8888A852DBAA6B92B5925004A7018FB1F0CF75E65B8D023AD4D8FEFDDD1A5C05
SHA-512:	DFBE14AE44FB98DE322C2C5D991FD1B4C9377DEB1A53A2A34267EE391102ACD6F3A260446A1662DEAC258DC44F2765F4C15FA7F806B4222D0A1E839145219819
Malicious:	false
URL:	https://publickeyservice.pa.aws.privacysandboxservices.com/.well-known/protected-auction/v1/public-keys
Preview:	{. "keys": [{. "id": "0500000000000000",. "key": "1BBxTi5MXrnxuEQmf2GYPBaUNmqh95qLdx+JCnTxqEs\u003d". }, {. "id": "2500000000000000",. "key": "Kmwic4NmZLYknfodgxAeYoo5zqwD8EjKJDgZBMyeBBQ\u003d". }, {. "id": "4500000000000000",. "key": "ZXnk8a7v1I2mCjyLL/1w6rsJMHMh6TmJwJL4aeYUtWQ\u003d". }, {. "id": "8500000000000000",. "key": "BtInwducTeAiwpmgyZwF5aJFJjoGPxu+dbrhg/uSqis\u003d". }, {. "id": "C500000000000000",. "key": "rFAb/eO3+72YRV7QylxBKKBuWYCWhcVMrq4eUfOs2Uw\u003d". }].}

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4811), with no line terminators
Category:	downloaded
Size (bytes):	4811
Entropy (8bit):	5.843022694570703
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaoFJxUCT6lC:12cV9sT3AW7NIz3FJxUC7
MD5:	226C25677CC1CA6C8AC152CCB055AB69
SHA1:	48D4654EE4CBE4AC37F6D2489CAAE948F6667CA7
SHA-256:	C79D446FA2DD69C9D2788D86B5E73FC0C30D9473051D77C04503CF1B46F1BF1A
SHA-512:	7ABF50A7F90A373D5D13476536B63E0E732BD4CBBC38ED3AF67ADCFA69C2955A914933FBA505AF0D38B6D98A1865DAFCA857AB0861CD1540346E698DDD049C26
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/858128210/?random=1736522600079&cv=11&fst=1736522600079&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	514
Entropy (8bit):	5.213179069097386
Encrypted:	false
SSDEEP:	12:6/spV1+zBcd9sZXyNceQcpsc4cGF/7uTz:KIV1+tmOZCNLQtc4rQTz
MD5:	FE3D7F26A009F1A62EAFA76878085332
SHA1:	632CB6EE88835848BCCCA0A86E3F63F1795210A1
SHA-256:	685ECEFA96DB1E84F8AFC5FA4815AD2069ED2017BC8D4E0A0DBDF4F87B015F98
SHA-512:	B5007F8BE5F4EAFD0662423A7951B25111BFB3730A7F79B8FAA7B75AB547E189503DBABA344F931FD66AE6B274C1CB21835A384138F92CBA7D86F1E8A7E09A95
Malicious:	false
URL:	https://publickeyservice.pa.gcp.privacysandboxservices.com/.well-known/protected-auction/v1/public-keys
Preview:	{. "keys": [{. "id": "1A80000000000000",. "key": "lHdffqIGE8LIzmQJzRpm2F41hvm03NGQK94v5r1Jjg4\u003d". }, {. "id": "3A80000000000000",. "key": "Z0aHPYcr7Bphwm3Spd9zQPtZ1IkJYBuXWygf2f+HFSo\u003d". }, {. "id": "5A80000000000000",. "key": "3OczGD+msTkxBOxmd66vnW06FEftMhU3Vj/WVBGeHCc\u003d". }, {. "id": "9A80000000000000",. "key": "Ipvo0JUVv4zrxqxLV6a5kgur83BicamSuIbjq4nGPG8\u003d". }, {. "id": "DA80000000000000",. "key": "emmK3BRsyOQycwYrUmsBHsNLl89aA26azZklrze4QHg\u003d". }].}

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7410
Entropy (8bit):	4.440225293496907
Encrypted:	false
SSDEEP:	192:6ZKqHiIPAqy0JviDla8w9miUDt1R94ExJ4NrKw1KSs0za:6ZxoqUla8HR94ExJ4NWw1K302
MD5:	2CBB3A4955B0C4EE9ADE91266AEE50A2
SHA1:	F4A7287ED6CE028BFF8E073FAD691C593099C1B3
SHA-256:	189F44B079D9299F16CD11E54C7E6A8E7E336998DF6A23A25444DBC5A7050DDD
SHA-512:	67FF6AC6A29FC39B9936315146A054605B671D22D1F4B09BE28B70201457739C84F795D050D871E9004F71FC0970CBC3E04F870488B68A5FA5F3C482C22E7511
Malicious:	false
URL:	https://repository.pcapp.store/pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg
Preview:	<svg width="107" height="109" viewBox="0 0 107 109" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="click_icon" filter="url(#filter0_d_539_286)"><g id="Group"><path id="Vector" d="M78.8563 41.6141C78.9042 41.5662 78.9521 41.5662 78.9521 41.5183C79 41.4704 79 41.4225 79 41.3746C79 41.3268 79 41.2789 79 41.1831C79 41.0873 78.9521 41.0394 78.9042 40.9437C78.8563 40.8479 78.8085 40.8 78.7127 40.7042C78.6648 40.6084 78.569 40.5606 78.4732 40.5127C78.3775 40.4648 78.2817 40.369 78.1859 40.3211L31.1606 17.1437C31.0648 17.0958 31.0169 17.0958 30.9211 17.0479C30.8254 17 30.7775 17 30.6817 17C30.5859 17 30.4901 17 30.3944 17C30.2986 17 30.2028 17 30.107 17C30.0113 17 29.9634 17.0479 29.9155 17.0958C29.8676 17.1437 29.8197 17.1437 29.7718 17.1916C29.7239 17.2394 29.7239 17.2873 29.6761 17.3352L28 23.8V23.8479V23.8958V23.9437V23.9915L35.8535 67.2817C35.8535 67.4253 35.9014 67.5211 35.9972 67.6169C36.0451 67.7127 36.1408 67.8084 36.2366 67.9042C36.3324 68 36.4282 68.0958 36.5718 68.1437C36.66

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3030
Entropy (8bit):	4.881732391363463
Encrypted:	false
SSDEEP:	48:fHL2FgahZFgahDFgah2LCn2cLin2LHtkrwDMHrrwMMH+BjXkE:aFgahZFgahDFgahhuEc
MD5:	23DF6F3E1D5A1DB5A782F3F71FAC80CE
SHA1:	AB96966996D0EB3DD9A1353A59417FACAC966DA2
SHA-256:	8540F6C7F6B27F81F7F2AB35969886E5CEB3C00E5F16BD83C9F8FD831C7BA05D
SHA-512:	A557FAC738CD3CAD73B9FD3FA1B8833FFE433E226193621CA6E20CA0629CD4EC683F08C8FA1B475429D2E70F6CC30CE7D2738CAADC704A63FF601931B1B12B66
Malicious:	false
URL:	https://repository.pcapp.store/pcapp/images/front_img/logo/logo-dark.svg
Preview:	<svg width="90" height="90" viewBox="0 0 90 90" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="90" height="90" rx="20" fill="url(#paint0_linear_2257_92)"/>.<path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.0001 15.0344 16.4554 15.0344 20.7178V31.2499C15.0344 44.611 25.8694 58.2779 44.9999 58.2779C63.1725 58.2779 74.9655 44.5999 74.9655 31.2499V20.7178C74.9655 16.4554 71.5101 13.0001 67.2478 13.0001C62.9854 13.0001 59.5301 16.4554 59.5301 20.7178V31.2499C59.5301 36.0404 54.6819 43.8426 44.9999 43.8426C35.318 43.8426 30.4698 36.0404 30.4698 31.2499V20.7178Z" fill="#1B86F2"/>.<path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.0001 15.0344 16.4554 15.0344 20.7178V31.2499C15.0344 44.611 25.8694 58.2779 44.9999 58.2779C63.1725 58.2779 74.9655 44.5999 74.9655 31.2499V20.7178C74.9655 16.4554 71.5101 13.0001 67.2478 13.0001C62.9854 13.0001 59.5301 16.4554 59.5301 20.7178V31.2499C59.5301 36.0404 54.6819 43.8426 44

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4828), with no line terminators
Category:	dropped
Size (bytes):	4828
Entropy (8bit):	5.849534078219635
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaoFJxUCT6lON:12cV9sT3AW7NIz3FJxUCr
MD5:	42454A5168FCA298207172D7C5EFF651
SHA1:	C1A0BD586A3A915BA1F03DED3924A46010925FDE
SHA-256:	086CB55EACD3E743F5AF12A2B6ADE894FC151F911FEA725EEF9C7848FA8646C8
SHA-512:	C3ECA901D8D253BA3FAE50592BBBC01A20692084C4450916FA850A82E7CC871D50744DF2985949AF686BCAFB57F026A60501681F6406ECBEB4152216CFB77F15
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16090), with no line terminators
Category:	downloaded
Size (bytes):	16090
Entropy (8bit):	5.582316382829316
Encrypted:	false
SSDEEP:	384:yAdgQn+FFM8m08gr8hL89Cj8tm8078Nu8A18IN8w+LFl8Ln0/5r/sL/Uj/gm/F7N:yb/h8o818k8I8c888C8G8NxmL0/p/M/k
MD5:	30F364D9B87C4DE2D91FC6809375DB19
SHA1:	89C6A5DAF44D3955107FB1B02F4054FF103B5B0E
SHA-256:	99BFC0B5057E2270F0E39D83A54D533FC280AD8ABE731C3F86404965460D09F5
SHA-512:	7D844CF464949D25AF6530ED4067DC4D610BE816062926113DC1CB1729DCAD242213F2BD855FC76343BF28F5BE6C12F3DBB235645DF036CAFB5C3C5143A88AC9
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/858128210?random=1736522600079&cv=11&fst=1736522600079&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s1224110086.1736522600","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s1224110086.1736522600\u0026ig_key=1sNHMxMjI0MTEwMDg2LjE3MzY1MjI2MDA!2sZ6jIaQ!3sAAptDV4S7Jyg","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sJvigiA!2sZ6jIaQ!3sAAptDV4S7Jyg"],"userBiddingSignals":[["596093288","475816165","7904705661","7896384790","7904283812"],null,1736522601611982],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adf

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
URL:	https://www.googletagmanager.com/static/service_worker/5190/sw_iframe.html?origin=https%3A%2F%2Fpcapp.store
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	dropped
Size (bytes):	303277
Entropy (8bit):	5.562512092541436
Encrypted:	false
SSDEEP:	3072:4J3a4IwyIJ/rNaRTO0eNGAlwvOfyk3pBuYMyzOgMiExYx2wE3OPoKx8Sun2i:K9yIJDNaR8GaUsuyzNM8x2wE3OPoKx7Q
MD5:	6CF5F5F175D981D2BCB70C01AB34D202
SHA1:	D6B961FBFACEE80AE0CA288F2CA7B3D747AB8416
SHA-256:	0EA2EBD4E2F8B785F763A9758F01E9D80E61347A533A855E02A65DAEDC88783F
SHA-512:	E1D8C3B2C5C3C2CBA5DFAD1D6FC8BF96E6DDFC0AF7CE9C48923F02137D2902D5A7998C9DC8A02BE4772BF65C0924DC38F66D1CA6E8E1E7247CE6DFB0F94C57B8
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-858128210","tag_id":16},{"function":"__ogt_cps","priority":6,"vtp_cpsMode":"ALL","tag_id":8},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	downloaded
Size (bytes):	303277
Entropy (8bit):	5.562567951410025
Encrypted:	false
SSDEEP:	3072:4J3a4IwyIJ/rNaRFO0eNGAlwvOfyk3pBuYMyzOgMiExYx2wE3OPoKx8Sun2i:K9yIJDNaRGGaUsuyzNM8x2wE3OPoKx7Q
MD5:	2BD72B37DCC82148F943CAFEDE770D58
SHA1:	EC09F3B5952C82AAE2B49DD6E624D2AE19F9A24D
SHA-256:	9D9A7387E3CB638BF157FB58C60F40BB60EB3356142F3A997EC67F669C02F468
SHA-512:	6CF29DCBE3E8E5A20ECD254E570D5D1D6851ADA196A60A380C222657A246511BC00C5A150E64CDF6327A67D8A14772E123079B3FB1027FEF399074A566535CA2
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=AW-858128210
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-858128210","tag_id":16},{"function":"__ogt_cps","priority":6,"vtp_cpsMode":"ALL","tag_id":8},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7410
Entropy (8bit):	4.440225293496907
Encrypted:	false
SSDEEP:	192:6ZKqHiIPAqy0JviDla8w9miUDt1R94ExJ4NrKw1KSs0za:6ZxoqUla8HR94ExJ4NWw1K302
MD5:	2CBB3A4955B0C4EE9ADE91266AEE50A2
SHA1:	F4A7287ED6CE028BFF8E073FAD691C593099C1B3
SHA-256:	189F44B079D9299F16CD11E54C7E6A8E7E336998DF6A23A25444DBC5A7050DDD
SHA-512:	67FF6AC6A29FC39B9936315146A054605B671D22D1F4B09BE28B70201457739C84F795D050D871E9004F71FC0970CBC3E04F870488B68A5FA5F3C482C22E7511
Malicious:	false
Preview:	<svg width="107" height="109" viewBox="0 0 107 109" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="click_icon" filter="url(#filter0_d_539_286)"><g id="Group"><path id="Vector" d="M78.8563 41.6141C78.9042 41.5662 78.9521 41.5662 78.9521 41.5183C79 41.4704 79 41.4225 79 41.3746C79 41.3268 79 41.2789 79 41.1831C79 41.0873 78.9521 41.0394 78.9042 40.9437C78.8563 40.8479 78.8085 40.8 78.7127 40.7042C78.6648 40.6084 78.569 40.5606 78.4732 40.5127C78.3775 40.4648 78.2817 40.369 78.1859 40.3211L31.1606 17.1437C31.0648 17.0958 31.0169 17.0958 30.9211 17.0479C30.8254 17 30.7775 17 30.6817 17C30.5859 17 30.4901 17 30.3944 17C30.2986 17 30.2028 17 30.107 17C30.0113 17 29.9634 17.0479 29.9155 17.0958C29.8676 17.1437 29.8197 17.1437 29.7718 17.1916C29.7239 17.2394 29.7239 17.2873 29.6761 17.3352L28 23.8V23.8479V23.8958V23.9437V23.9915L35.8535 67.2817C35.8535 67.4253 35.9014 67.5211 35.9972 67.6169C36.0451 67.7127 36.1408 67.8084 36.2366 67.9042C36.3324 68 36.4282 68.0958 36.5718 68.1437C36.66

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3030
Entropy (8bit):	4.881732391363463
Encrypted:	false
SSDEEP:	48:fHL2FgahZFgahDFgah2LCn2cLin2LHtkrwDMHrrwMMH+BjXkE:aFgahZFgahDFgahhuEc
MD5:	23DF6F3E1D5A1DB5A782F3F71FAC80CE
SHA1:	AB96966996D0EB3DD9A1353A59417FACAC966DA2
SHA-256:	8540F6C7F6B27F81F7F2AB35969886E5CEB3C00E5F16BD83C9F8FD831C7BA05D
SHA-512:	A557FAC738CD3CAD73B9FD3FA1B8833FFE433E226193621CA6E20CA0629CD4EC683F08C8FA1B475429D2E70F6CC30CE7D2738CAADC704A63FF601931B1B12B66
Malicious:	false
Preview:	<svg width="90" height="90" viewBox="0 0 90 90" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="90" height="90" rx="20" fill="url(#paint0_linear_2257_92)"/>.<path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.0001 15.0344 16.4554 15.0344 20.7178V31.2499C15.0344 44.611 25.8694 58.2779 44.9999 58.2779C63.1725 58.2779 74.9655 44.5999 74.9655 31.2499V20.7178C74.9655 16.4554 71.5101 13.0001 67.2478 13.0001C62.9854 13.0001 59.5301 16.4554 59.5301 20.7178V31.2499C59.5301 36.0404 54.6819 43.8426 44.9999 43.8426C35.318 43.8426 30.4698 36.0404 30.4698 31.2499V20.7178Z" fill="#1B86F2"/>.<path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.0001 15.0344 16.4554 15.0344 20.7178V31.2499C15.0344 44.611 25.8694 58.2779 44.9999 58.2779C63.1725 58.2779 74.9655 44.5999 74.9655 31.2499V20.7178C74.9655 16.4554 71.5101 13.0001 67.2478 13.0001C62.9854 13.0001 59.5301 16.4554 59.5301 20.7178V31.2499C59.5301 36.0404 54.6819 43.8426 44

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-VFQWFX3X1C&gacid=1265177916.1736522600&gtm=45je5190v898645365za200zb9103256652&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1939852465
Preview:	<html></html>

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15885), with no line terminators
Category:	downloaded
Size (bytes):	15885
Entropy (8bit):	5.575923314454576
Encrypted:	false
SSDEEP:	384:yAdgQ0+FFM8m08gr8hL89Cj8tm8078Nu8A18IN8w+LFl8Ln0/5r/sL/Uj/gm/F7x:1b/h8o818k8I8c888C8G8NxmL0/p/M/O
MD5:	0A0150E3F06B907B98F8D7FE9079FE56
SHA1:	4C51DFF9619AE8C07404AC593210CA60A98F26C6
SHA-256:	A942AAA509F3643C7EC6B8A0BBE89A5E9561BA4E70C3469500110EF5C999D9CA
SHA-512:	5CA8F5DB840BF640E6CBE37E0FBD9751A0725942373BE0B5167AB51C11348F5163AA29CE88719E22932BC4DBD049EEB45874644FB9D8C01B8451E676AE9302CE
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/858128210?random=1736522599765&cv=11&fst=1736522599765&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s1224110086.1736522600","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s1224110086.1736522600\u0026ig_key=1sNHMxMjI0MTEwMDg2LjE3MzY1MjI2MDA!2sZ6jIaQ!3sAAptDV4S7Jyg","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sJvigiA!2sZ6jIaQ!3sAAptDV4S7Jyg"],"userBiddingSignals":[["475816165","7904705661","7896384790","596093288","7904283812"],null,1736522601507512],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adf

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14408)
Category:	dropped
Size (bytes):	454717
Entropy (8bit):	5.629961510982459
Encrypted:	false
SSDEEP:	6144:F40AiF9yIJDtxaREGXUskxzNM8x2wE3OPoKWUB4m72jAYqmf2:e0JxJZ4R/INM8AeTN7vmu
MD5:	AE859BB075382CD58EC49764F523591F
SHA1:	7FE9F74760ABCD610638A79762C70C13345B7A4B
SHA-256:	5A456DEF189353C15740639E75A679622E7CEF7D1FEE14C6F8D19838F8DD584F
SHA-512:	5690AF38A8071BD3AD9FD0167A0EC8534CB56F84116C1E5FD8F7F0513BE1070D53297DD11DC50C7AD17854CFA48B3FE6A8B59F1627F8407C25FCCD791BC785A1
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":39,"vtp_rules":["list","pcapp\\.store","pcappstore\\.download"],"tag_id":11},{"function":"__ogt_ga_send","priority":29,"vtp_value":true,"tag_id":13},{"function":"__ogt_referral_exclusion","priority":29,"vtp_includeConditions":["list","veryfast\\.io"],"tag_id":14},{"function":"__ogt_session_timeout","priority":29,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":29,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionTy

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48444, version 1.0
Category:	downloaded
Size (bytes):	48444
Entropy (8bit):	7.995593685409469
Encrypted:	true
SSDEEP:	768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1
MD5:	8E433C0592F77BEB6DC527D7B90BE120
SHA1:	D7402416753AE1BB4CBD4B10D33A0C10517838BD
SHA-256:	F052EE44C3728DFD23ABA8A4567150BC314D23903026FBB6AD089422C2DF56AF
SHA-512:	5E90F48B923BB95AEB49691D03DADE8825C119B2FA28977EA170C41548900F4E0165E2869F97C7A9380D7FF8FF331A1DA855500E5F7B0DFD2B9ABD77A386BBF3
Malicious:	false
URL:	https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2
Preview:	wOF2.......<.......l..............................`...\..p?HVAR.m?MVAR^.`?STAT.N'&..>/l........>....0....6.$.... ........[..A.2v.6......$..e...w"../.L.p:......Tpc..8@.[5......d#d.xw..o.O3-.....%..>...%..)~p.K.J.H..S...s..z..Wa.. 0\..J.....BL;V..-.L...j....^.9..HO l..,..6.v....?....x.....m..;....a![zif...Ur...Q..P.&.I1..:n.p...j~..h...9.!....@.<.bl\|.Y?h..B.j/..rH.S%/~.^D...6..D.4G...y....Y.....=/o..W..5ryo.d?.gA]..?...1V..S......7ZJ...f....mBG[0eW....y..%B}..]? ...,sR<.y~.~.}.%.!..,X.....`...R..^....S.....u.?k.v.k..U.u..M..`!...b!..X)P...y{.........n..T+6...R......L...x}...g...].g"WT.b..h ....X...=;{w...QO.s..w..@.(,..........{.........1..@...(...\.......9..2.h9P.G........K.Dp...F..4W..ui.u...G...s..x7.?..tg..D..O.sA..t.t.4..~..e\...X.....T..kf.qfX..=^_....g"....De...x[J..A..).G.YUhR.....0.l..#&3.'.K.............$I.Pp.../.s.<@...r=..S......d..P.S.B.w.~X..ZK....h J.`A.bv,=.....>1.Ev.^..U.A. ....EU..].........dw..!$.A`..B.._.....Z~..!..J..l]r.m}m..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14408)
Category:	downloaded
Size (bytes):	454734
Entropy (8bit):	5.6300292507151415
Encrypted:	false
SSDEEP:	6144:F40AiF9yIJDtxaXyGXUskxzNM8x2wE3OPoKWUB4m72jAYqmf2:e0JxJZ4XRINM8AeTN7vmu
MD5:	3DD951F56F02DAFDB66F3960F4B9AC11
SHA1:	1C855C00CEBB94ED2C70E93BE5B432C100E7F76E
SHA-256:	C27B1CC906441BBEB2CABF7AC32D777A1CCD3B3CF7B25941EFF6CE2E1112FB32
SHA-512:	5F1465485A1E4410B20FCA9EDF92FAF71514E9B69376D07AD0249BF341C49EF1E4402C26AFB9A5BE341D7D585604708FF965AEB02DDAA5234CE5C42C281AF696
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-VFQWFX3X1C&l=dataLayer&cx=c&gtm=45be5190v9103256652za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":39,"vtp_rules":["list","pcapp\\.store","pcappstore\\.download"],"tag_id":11},{"function":"__ogt_ga_send","priority":29,"vtp_value":true,"tag_id":13},{"function":"__ogt_referral_exclusion","priority":29,"vtp_includeConditions":["list","veryfast\\.io"],"tag_id":14},{"function":"__ogt_session_timeout","priority":29,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":29,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionTy

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3628
Entropy (8bit):	4.6859343360858
Encrypted:	false
SSDEEP:	96:kBXy40c2tYR+hxd4lJ9IUavRUJTUqUrUfjS4lJ50GvmT4Uiz:qAwexd4lv3avyJYvArVlJ50GvnUiz
MD5:	EE8B3C30DF90D2D7459DD6D7F7067C14
SHA1:	6D07CBC5AE2E46F3D5ECD299B293F04CD045E633
SHA-256:	CE6182A6D356B7F6D0A6B2BE83FC373AB7DE807D0B92342ABFF28CAEF5A6028A
SHA-512:	5FDAB68224793B1979550E6425BAB1607E2B2902025178C0C7217F6CEBFC767248B62C3404C2F9D5D5F595CC9EC370775E2C3E1F16E631C10764DA063B5DC53C
Malicious:	false
Preview:	<svg width="132" height="132" viewBox="0 0 132 132" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Group 1296"><g id="Rectangle 302" filter="url(#filter0_d_539_279)"><path d="M16 12.5C16 10.0147 18.0147 8 20.5 8H111.5C113.985 8 116 10.0147 116 12.5V103.5C116 105.985 113.985 108 111.5 108H20.5C18.0147 108 16 105.985 16 103.5V12.5Z" fill="white"/></g><g id="icon"><path id="Vector" d="M81.8943 54.2335C77.1424 54.2335 72.3905 54.2335 67.6386 54.2335C66.7256 54.2335 66.7256 54.2335 66.7256 53.3679C66.7256 46.483 66.7256 39.6183 66.7256 32.7334C66.7256 31.8678 66.7256 31.8879 67.5764 31.7671C70.9172 31.3041 74.2373 30.8209 77.5782 30.3579C81.417 29.8144 85.2352 29.291 89.074 28.7676C91.4188 28.4455 93.7637 28.1032 96.0877 27.7811C97.1253 27.6402 97.1253 27.6402 97.1253 28.6468C97.1253 36.8402 97.1253 45.0537 97.1253 53.2471C97.1253 54.2335 97.1253 54.2335 96.1085 54.2335C91.3566 54.2335 86.6254 54.2335 81.8943 54.2335Z" fill="#3683F7"/><path id="Vector_2" d="M81.9151 60.0742C86.7292 6

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1234)
Category:	downloaded
Size (bytes):	21351
Entropy (8bit):	5.503622110294562
Encrypted:	false
SSDEEP:	384:HdQm0XyQHiUtmxKLjL9jRiKPS4XYunqu9MVkWth5nXg5d7yFsiTtgfgelMBS5So2:HdR6yeiUtmELjTiMSQ5ndSVkWb5CduFn
MD5:	AC43CF3B4914E73C29910415BD19DB97
SHA1:	AB38BFA238B44E53F05AA778721D9585D0C6EA9D
SHA-256:	FA98E49ACB4BA980865779FA22B7CE1C48BDD56CB44A0FE19A8D6899F5FFE077
SHA-512:	8E36FC6B94073AA48C729342AC02287B0965A4375DB8A6F056F034044F43BCA51CE449FDD581B49839BE592BB4375D3891C90C0AFCCF6C326ED0CD43E27C43C1
Malicious:	false
URL:	https://www.googletagmanager.com/static/service_worker/5190/sw.js?origin=https%3A%2F%2Fpcapp.store
Preview:	'use strict';var ca=function(a){function b(d){return a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(b,c).then(f,e)}f(a.next())})},h=function(a){return ca(a())};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var p=this\|\|self;var t,y;a:{for(var da=["CLOSURE_FLAGS"],A=p,B=0;B<da.length;B++)if(A=A[da[B]],A==null){y=null;break a}y=A}var ea=y&&y[610401301];t=ea!=null?ea:!1;var E;const fa=p.navigator;E=fa?fa.userAgentData\|\|null:null;function F(a){return t?E?E.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function G(a){var b;a:{const c=p.navigator;if(c){const d=c.userAgent;if(d){b=d;break a}}b=""}return b.indexOf(a)!=-1};function H(){return t?!!E&&E.brands.length>0:!1}function I(){return H()?F("Chromium"):(G("Chrome")\|\|G("CriOS"))&&!(H()?0:G("Edge"))\|\|G("Silk")};!G("Android")\|\|I();I();G("Safari")&&(I()\|\|(H()?0:G("Coast"))\|\|(H()?0:G("Opera"))\|\|(H()?0:G("Edge"))\|\|(

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4731), with no line terminators
Category:	dropped
Size (bytes):	4731
Entropy (8bit):	5.8309890634019625
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTai8J+UCQlR:12cV9sT3AW7NIzP8J+U1
MD5:	7F41BBC9FFB5091681555470D43D9BBB
SHA1:	ABE3BA603F9E91BFC9300EBAC6C4414BE8A9A181
SHA-256:	0B0A062DEBA546D7FE9CAC0FB2155875169739DA56AA4E887BBDF29DCD2FB13C
SHA-512:	48650E75973F871EA7BF8A58730CFB65F5F4B504D0068982FE0FF6C93C6182D7A402476DF079557287D2A34AF6D93E855CB7E8A1BAE9E222682DB280C5D0D0E3
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2499
Entropy (8bit):	5.4636477793325495
Encrypted:	false
SSDEEP:	48:ejO4aAujO4aFuFZjjO4aNjO4a73rjO4awNjO4aQJc+uXjO4aWN0xD:aO4aAqO4aEFZHO4adO4a73vO4aoO4aQt
MD5:	382991778933FB8F5697DEB2EE26A0ED
SHA1:	6CDED0C76F01EA3C3C6DB8128B5CF59063A92C78
SHA-256:	0919FF36779EEF85FA50AF4B94FB2D496A765612B7C5EDD31BA69EA1F4136736
SHA-512:	FC05BAFD9EB747B7060B8C730E8A467CFD0A0311622B325E5EB74A1083D3A7B8897396CF4FE310E7567EAA1B5A951AB3906F57E57671F2852A18ED1AD0E7E2C9
Malicious:	false
URL:	https://fonts.googleapis.com/css2?family=Inter:wght@100..900&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. f

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4730), with no line terminators
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.838477831285355
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTai9JuUCQln:12cV9sT3AW7NIzP9JuUj
MD5:	1C12B99B7A864AE3C4C564FBDE555078
SHA1:	6AD3915F624445DD3F018896D98176FBE760159E
SHA-256:	F1CF032318FB7C8356D60BA139F8DBA511431790C8B0B29CFCC849B5DD1E63B8
SHA-512:	6C287E7727EF53CEA9BBD255101A15DE44D29201411515D621CEFA9E884869661E0159E8B8D9E0CC4A201BA70D4845D993807EEAEE3789FB5338B4EA97A38CA5
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4712), with no line terminators
Category:	downloaded
Size (bytes):	4712
Entropy (8bit):	5.827242845113098
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTai9JuUCQlPN:12cV9sT3AW7NIzP9JuUjN
MD5:	BE1DCA1249C4D09EF66013DF55684D75
SHA1:	231396938CD69289B146D30AE8592E2AF16FC7D5
SHA-256:	5ACC84B51EF5B65801E7F8BCAC08654D74093511CFF38D1B98512FA45316B814
SHA-512:	04748D63CEE8086F08E841DC4E8AE3827BD20D08A0E6F9CA2B4962E7498DAB35D7D3AEBC26F2432D9CD3021FED1534D0AC54A3F072DBDD8FA2E92688A1552CB3
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/858128210/?random=1736522599765&cv=11&fst=1736522599765&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14408)
Category:	dropped
Size (bytes):	454725
Entropy (8bit):	5.6300060784741826
Encrypted:	false
SSDEEP:	6144:F40AiF9yIJDtxaXyGXUskxzNM8x2wE3OPoKWUB4m72jAYqmf0:e0JxJZ4XRINM8AeTN7vmc
MD5:	3545FC1D591A5C825795BDDE6B823CF5
SHA1:	650822548D5B45ED92FF230C00AC1259099D8E73
SHA-256:	37D8470520DFC9DBD5C68D980FCDAADFFFC6BD21BD3CF1F757C08ACFC48C5BB9
SHA-512:	80BC47875FB82F258F44E81A4F1ACFF75DC6C4BDC78ED8947EABCD3EF5E00787226C25CB3C01FD86845C3807EA5F408993FB1F57EC1E54427C0AFA394E78FA4A
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":39,"vtp_rules":["list","pcapp\\.store","pcappstore\\.download"],"tag_id":11},{"function":"__ogt_ga_send","priority":29,"vtp_value":true,"tag_id":13},{"function":"__ogt_referral_exclusion","priority":29,"vtp_includeConditions":["list","veryfast\\.io"],"tag_id":14},{"function":"__ogt_session_timeout","priority":29,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":29,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionTy

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4714), with no line terminators
Category:	downloaded
Size (bytes):	4714
Entropy (8bit):	5.82659253196461
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTai8J+UCQlj:12cV9sT3AW7NIzP8J+Uv
MD5:	6286FB92381B4C5017D47E52AC98A771
SHA1:	26A0C6A142F9BD40775EDDBACACF33EB0442094E
SHA-256:	188AC1BA88263A864B10C133C8DAAC24F12C6A0D60B5F55520E10298324C3DBE
SHA-512:	333888569E7F7520F633911E9C4DE3C7A56E22EAC6DCE24495DB9BF268E4CBAE7E1BFE796CCDD10929475E01D04428503EF945A7F0E884536BB92CFC10336C8D
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/858128210/?random=1736522599729&cv=11&fst=1736522599729&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15885), with no line terminators
Category:	downloaded
Size (bytes):	15885
Entropy (8bit):	5.576008619351475
Encrypted:	false
SSDEEP:	384:yAdgQM+LFl8Ln0/5r/sL/Uj/gm/F7/Nu/y1/bN/1+lFT8X0FUrFeLFkjFqmFR7Fv:FxmL0/p/M/I/V/1/8/E/p/g7QkFkFWFE
MD5:	15B813BEEC5B139A94FEC967860C05EA
SHA1:	3CA3D655387AB83938AA96FB934869424D2CA6F6
SHA-256:	B859CD1856E3FE91C26D80F36F6F682EE4A6BB5D09CB8650E4396AA61956C063
SHA-512:	29A5BF7A2B51576A0D62587FE0D91A6456EBD3103DDD0CF80B195763ED3C3EBFA312B34938EE288F848DB837025C500AADF65155EFA594C6790C41B00C0D70D3
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/858128210?random=1736522599729&cv=11&fst=1736522599729&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s1224110086.1736522600","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s1224110086.1736522600\u0026ig_key=1sNHMxMjI0MTEwMDg2LjE3MzY1MjI2MDA!2sZ6jIaQ!3sAAptDV4S7Jyg","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sJvigiA!2sZ6jIaQ!3sAAptDV4S7Jyg"],"userBiddingSignals":[["475816165","7904705661","7904283812","596093288","7896384790"],null,1736522601493776],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adf

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3628
Entropy (8bit):	4.6859343360858
Encrypted:	false
SSDEEP:	96:kBXy40c2tYR+hxd4lJ9IUavRUJTUqUrUfjS4lJ50GvmT4Uiz:qAwexd4lv3avyJYvArVlJ50GvnUiz
MD5:	EE8B3C30DF90D2D7459DD6D7F7067C14
SHA1:	6D07CBC5AE2E46F3D5ECD299B293F04CD045E633
SHA-256:	CE6182A6D356B7F6D0A6B2BE83FC373AB7DE807D0B92342ABFF28CAEF5A6028A
SHA-512:	5FDAB68224793B1979550E6425BAB1607E2B2902025178C0C7217F6CEBFC767248B62C3404C2F9D5D5F595CC9EC370775E2C3E1F16E631C10764DA063B5DC53C
Malicious:	false
URL:	https://repository.pcapp.store/pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg
Preview:	<svg width="132" height="132" viewBox="0 0 132 132" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Group 1296"><g id="Rectangle 302" filter="url(#filter0_d_539_279)"><path d="M16 12.5C16 10.0147 18.0147 8 20.5 8H111.5C113.985 8 116 10.0147 116 12.5V103.5C116 105.985 113.985 108 111.5 108H20.5C18.0147 108 16 105.985 16 103.5V12.5Z" fill="white"/></g><g id="icon"><path id="Vector" d="M81.8943 54.2335C77.1424 54.2335 72.3905 54.2335 67.6386 54.2335C66.7256 54.2335 66.7256 54.2335 66.7256 53.3679C66.7256 46.483 66.7256 39.6183 66.7256 32.7334C66.7256 31.8678 66.7256 31.8879 67.5764 31.7671C70.9172 31.3041 74.2373 30.8209 77.5782 30.3579C81.417 29.8144 85.2352 29.291 89.074 28.7676C91.4188 28.4455 93.7637 28.1032 96.0877 27.7811C97.1253 27.6402 97.1253 27.6402 97.1253 28.6468C97.1253 36.8402 97.1253 45.0537 97.1253 53.2471C97.1253 54.2335 97.1253 54.2335 96.1085 54.2335C91.3566 54.2335 86.6254 54.2335 81.8943 54.2335Z" fill="#3683F7"/><path id="Vector_2" d="M81.9151 60.0742C86.7292 6

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Entropy (8bit):	7.695249713348725
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Setup.exe
File size:	205'424 bytes
MD5:	9ef1c049702436c2597449bfb966130e
SHA1:	59218c019d0f5393e90564c4a4489b707d3b7caf
SHA256:	500120d7f112716a9b0bcab569ed5c480b694641e604f6df9da264249bf8f2ff
SHA512:	9d33957ef75730060c8ff30405b40a94250043a26b32b4349cbaa9315605b3cb0b7cb3f5d877b871b0026f045cbeb5c7ca45b5b453d5594394d568a41f678f6a
SSDEEP:	3072:SbG7N2kDTHUpouUB0sm0e/Xxmai4IcPzy5n+/mGCK8izuG2okB2h4l591BBgkwUS:SbE/HUcasy/5i4dry5nmQiiGz4z9TJ5S
TLSH:	CA14ADEA56548D5DCE3A7DF2B52942FA039EC1FED1857885E3DE312930C4460AA2CF29
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf..sV..Pf..V`..Pf.Rich.Pf.........................PE..L...Z.Oa.................j.........

File Icon


Icon Hash:	21333333964ca249

Static PE Info

General

Entrypoint:	0x40352d
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x614F9B5A [Sat Sep 25 21:57:46 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	56a78d55f3f7af51443e58e0ce2fb5f6

Authenticode Signature

Signature Valid:	true
Signature Issuer:	CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1, O="DigiCert, Inc.", C=US
Signature Validation Error:	The operation completed successfully
Error Number:	0
Not Before, Not After	08/05/2024 02:00:00 14/02/2025 00:59:59
Subject Chain	CN=FAST CORPORATION LTD, O=FAST CORPORATION LTD, L=Ra'anana, C=IL, SERIALNUMBER=515636181, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=IL
Version:	3
Thumbprint MD5:	04786BD703B906E22AECB2AD38CE4D94
Thumbprint SHA-1:	07BE42727905BE32C822A638502C1B8FAAE6540A
Thumbprint SHA-256:	FDB017BB88E5D453E22A73810690C72534F58EFB109EA0D4494EC393F2307DBC
Serial:	0E5C655E1CBE9A8879372F58A5BC0302

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
sub esp, 000003F4h
push ebx
push esi
push edi
push 00000020h
pop edi
xor ebx, ebx
push 00008001h
mov dword ptr [ebp-14h], ebx
mov dword ptr [ebp-04h], 0040A2E0h
mov dword ptr [ebp-10h], ebx
call dword ptr [004080CCh]
mov esi, dword ptr [004080D0h]
lea eax, dword ptr [ebp-00000140h]
push eax
mov dword ptr [ebp-0000012Ch], ebx
mov dword ptr [ebp-2Ch], ebx
mov dword ptr [ebp-28h], ebx
mov dword ptr [ebp-00000140h], 0000011Ch
call esi
test eax, eax
jne 00007F655153002Ah
lea eax, dword ptr [ebp-00000140h]
mov dword ptr [ebp-00000140h], 00000114h
push eax
call esi
mov ax, word ptr [ebp-0000012Ch]
mov ecx, dword ptr [ebp-00000112h]
sub ax, 00000053h
add ecx, FFFFFFD0h
neg ax
sbb eax, eax
mov byte ptr [ebp-26h], 00000004h
not eax
and eax, ecx
mov word ptr [ebp-2Ch], ax
cmp dword ptr [ebp-0000013Ch], 0Ah
jnc 00007F655152FFFAh
and word ptr [ebp-00000132h], 0000h
mov eax, dword ptr [ebp-00000134h]
movzx ecx, byte ptr [ebp-00000138h]
mov dword ptr [00434FB8h], eax
xor eax, eax
mov ah, byte ptr [ebp-0000013Ch]
movzx eax, ax
or eax, ecx
xor ecx, ecx
mov ch, byte ptr [ebp-2Ch]
movzx ecx, cx
shl eax, 10h
or eax, ecx

Rich Headers

Programming Language:

[EXP] VC++ 6.0 SP5 build 8804

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x8610	0xa0	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x6c000	0x8ab0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x2f908	0x2968	.data
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x8000	0x2b0	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x6897	0x6a00	ce9df19df15aa7bfbc0a8d0af0b841d0	False	0.6661261792452831	data	6.458398214928006	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x8000	0x14a6	0x1600	a118375c929d970903c1204233b7583d	False	0.4392755681818182	data	5.024109281264143	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0xa000	0x2b018	0x600	82a10c59a8679bb952fc8316070b8a6c	False	0.521484375	data	4.15458210408643	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.ndata	0x36000	0x36000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x6c000	0x8ab0	0x8c00	002f2c6a5ef3480ae3168bc9dc865c35	False	0.30948660714285714	data	5.590675654325742	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0x6c298	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 2835 x 2835 px/m	English	United States	0.2867855455833727
RT_ICON	0x704c0	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 2835 x 2835 px/m	English	United States	0.30840248962655603
RT_ICON	0x72a68	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 2835 x 2835 px/m	English	United States	0.34615384615384615
RT_ICON	0x73b10	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 2835 x 2835 px/m	English	United States	0.46187943262411346
RT_DIALOG	0x73f78	0x202	data	English	United States	0.4085603112840467
RT_DIALOG	0x74180	0xf8	data	English	United States	0.6290322580645161
RT_DIALOG	0x74278	0xa0	data	English	United States	0.60625
RT_DIALOG	0x74318	0xee	data	English	United States	0.6302521008403361
RT_GROUP_ICON	0x74408	0x3e	data	English	United States	0.8064516129032258
RT_VERSION	0x74448	0x240	data	English	United States	0.4895833333333333
RT_MANIFEST	0x74688	0x423	XML 1.0 document, ASCII text, with very long lines (1059), with no line terminators	English	United States	0.5127478753541076

Imports

DLL	Import
ADVAPI32.dll	RegCreateKeyExW, RegEnumKeyW, RegQueryValueExW, RegSetValueExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, SetFileSecurityW, RegOpenKeyExW, RegEnumValueW
SHELL32.dll	SHGetSpecialFolderLocation, SHFileOperationW, SHBrowseForFolderW, SHGetPathFromIDListW, ShellExecuteExW, SHGetFileInfoW
ole32.dll	OleInitialize, OleUninitialize, CoCreateInstance, IIDFromString, CoTaskMemFree
COMCTL32.dll	ImageList_Create, ImageList_Destroy, ImageList_AddMasked
USER32.dll	GetClientRect, EndPaint, DrawTextW, IsWindowEnabled, DispatchMessageW, wsprintfA, CharNextA, CharPrevW, MessageBoxIndirectW, GetDlgItemTextW, SetDlgItemTextW, GetSystemMetrics, FillRect, AppendMenuW, TrackPopupMenu, OpenClipboard, SetClipboardData, CloseClipboard, IsWindowVisible, CallWindowProcW, GetMessagePos, CheckDlgButton, LoadCursorW, SetCursor, GetSysColor, SetWindowPos, GetWindowLongW, PeekMessageW, SetClassLongW, GetSystemMenu, EnableMenuItem, GetWindowRect, ScreenToClient, EndDialog, RegisterClassW, SystemParametersInfoW, CreateWindowExW, GetClassInfoW, DialogBoxParamW, CharNextW, ExitWindowsEx, DestroyWindow, CreateDialogParamW, SetTimer, SetWindowTextW, PostQuitMessage, SetForegroundWindow, ShowWindow, wsprintfW, SendMessageTimeoutW, FindWindowExW, IsWindow, GetDlgItem, SetWindowLongW, LoadImageW, GetDC, ReleaseDC, EnableWindow, InvalidateRect, SendMessageW, DefWindowProcW, BeginPaint, EmptyClipboard, CreatePopupMenu
GDI32.dll	SetBkMode, SetBkColor, GetDeviceCaps, CreateFontIndirectW, CreateBrushIndirect, DeleteObject, SetTextColor, SelectObject
KERNEL32.dll	GetExitCodeProcess, WaitForSingleObject, GetModuleHandleA, GetProcAddress, GetSystemDirectoryW, lstrcatW, Sleep, lstrcpyA, WriteFile, GetTempFileNameW, CreateFileW, lstrcmpiA, RemoveDirectoryW, CreateProcessW, CreateDirectoryW, GetLastError, CreateThread, GlobalLock, GlobalUnlock, GetDiskFreeSpaceW, WideCharToMultiByte, lstrcpynW, lstrlenW, SetErrorMode, GetVersionExW, GetCommandLineW, GetTempPathW, GetWindowsDirectoryW, SetEnvironmentVariableW, CopyFileW, ExitProcess, GetCurrentProcess, GetModuleFileNameW, GetFileSize, GetTickCount, MulDiv, SetFileAttributesW, GetFileAttributesW, SetCurrentDirectoryW, MoveFileW, GetFullPathNameW, GetShortPathNameW, SearchPathW, CompareFileTime, SetFileTime, CloseHandle, lstrcmpiW, lstrcmpW, ExpandEnvironmentStringsW, GlobalFree, GlobalAlloc, GetModuleHandleW, LoadLibraryExW, MoveFileExW, FreeLibrary, WritePrivateProfileStringW, GetPrivateProfileStringW, lstrlenA, MultiByteToWideChar, ReadFile, SetFilePointer, FindClose, FindNextFileW, FindFirstFileW, DeleteFileW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-10T16:23:33.494463+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.24	59137	167.99.235.203	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 16:21:50.431123972 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:50.431193113 CET	443	49751	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:50.431495905 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:50.449821949 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:50.449850082 CET	443	49751	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:50.911422968 CET	443	49751	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:50.911513090 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:50.912802935 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:50.912816048 CET	443	49751	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:50.914124012 CET	443	49751	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:50.914190054 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:50.924633980 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:50.924762964 CET	443	49751	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:50.927900076 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:50.927912951 CET	443	49751	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:50.927959919 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:50.984648943 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:50.984791040 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:50.984833002 CET	443	49751	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.171701908 CET	443	49751	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.171798944 CET	443	49751	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.171802044 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.171849012 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.173177958 CET	49751	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.173197031 CET	443	49751	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.362828970 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.362875938 CET	443	49752	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.362967014 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.363967896 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.363979101 CET	443	49752	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.817740917 CET	443	49752	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.817809105 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.819974899 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.819994926 CET	443	49752	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.820358992 CET	443	49752	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.820405006 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.821361065 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.821418047 CET	443	49752	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.821466923 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.821646929 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.867337942 CET	443	49752	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.949933052 CET	443	49752	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.949999094 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.950014114 CET	443	49752	167.99.235.203	192.168.2.24
Jan 10, 2025 16:21:51.950059891 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.951822042 CET	49752	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:21:51.951850891 CET	443	49752	167.99.235.203	192.168.2.24
Jan 10, 2025 16:22:24.306704998 CET	49728	443	192.168.2.24	4.209.164.61
Jan 10, 2025 16:22:24.317492008 CET	443	49728	4.209.164.61	192.168.2.24
Jan 10, 2025 16:22:24.317601919 CET	49728	443	192.168.2.24	4.209.164.61
Jan 10, 2025 16:22:24.913583994 CET	80	49730	217.20.57.36	192.168.2.24
Jan 10, 2025 16:22:24.913736105 CET	49730	80	192.168.2.24	217.20.57.36
Jan 10, 2025 16:22:24.913816929 CET	49730	80	192.168.2.24	217.20.57.36
Jan 10, 2025 16:22:24.918567896 CET	80	49730	217.20.57.36	192.168.2.24
Jan 10, 2025 16:22:25.750475883 CET	80	49731	217.20.57.36	192.168.2.24
Jan 10, 2025 16:22:25.750617027 CET	49731	80	192.168.2.24	217.20.57.36
Jan 10, 2025 16:22:25.750669956 CET	49731	80	192.168.2.24	217.20.57.36
Jan 10, 2025 16:22:25.755615950 CET	80	49731	217.20.57.36	192.168.2.24
Jan 10, 2025 16:22:28.109750986 CET	80	49741	217.20.57.36	192.168.2.24
Jan 10, 2025 16:22:28.109898090 CET	49741	80	192.168.2.24	217.20.57.36
Jan 10, 2025 16:22:28.109955072 CET	49741	80	192.168.2.24	217.20.57.36
Jan 10, 2025 16:22:28.114855051 CET	80	49741	217.20.57.36	192.168.2.24
Jan 10, 2025 16:22:44.859539032 CET	49738	80	192.168.2.24	23.209.209.135
Jan 10, 2025 16:22:44.859632015 CET	49734	80	192.168.2.24	142.250.185.227
Jan 10, 2025 16:22:44.864798069 CET	80	49738	23.209.209.135	192.168.2.24
Jan 10, 2025 16:22:44.864912987 CET	49738	80	192.168.2.24	23.209.209.135
Jan 10, 2025 16:22:44.865262985 CET	80	49734	142.250.185.227	192.168.2.24
Jan 10, 2025 16:22:44.865322113 CET	49734	80	192.168.2.24	142.250.185.227
Jan 10, 2025 16:22:49.457308054 CET	49673	443	192.168.2.24	20.198.118.190
Jan 10, 2025 16:22:49.457362890 CET	443	49673	20.198.118.190	192.168.2.24
Jan 10, 2025 16:22:50.077372074 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:50.077430010 CET	443	49755	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:50.077497959 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:50.078526020 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:50.078538895 CET	443	49755	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:50.217691898 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.217742920 CET	443	49756	104.126.37.201	192.168.2.24
Jan 10, 2025 16:22:50.217804909 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.218774080 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.218795061 CET	443	49756	104.126.37.201	192.168.2.24
Jan 10, 2025 16:22:50.875786066 CET	443	49756	104.126.37.201	192.168.2.24
Jan 10, 2025 16:22:50.875909090 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.877594948 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.877602100 CET	443	49756	104.126.37.201	192.168.2.24
Jan 10, 2025 16:22:50.879046917 CET	443	49756	104.126.37.201	192.168.2.24
Jan 10, 2025 16:22:50.879146099 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.880594969 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.880682945 CET	443	49756	104.126.37.201	192.168.2.24
Jan 10, 2025 16:22:50.880749941 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.880759954 CET	443	49756	104.126.37.201	192.168.2.24
Jan 10, 2025 16:22:50.881072998 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.881556988 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.882047892 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.882056952 CET	443	49756	104.126.37.201	192.168.2.24
Jan 10, 2025 16:22:50.882337093 CET	443	49756	104.126.37.201	192.168.2.24
Jan 10, 2025 16:22:50.882462025 CET	443	49756	104.126.37.201	192.168.2.24
Jan 10, 2025 16:22:50.882503033 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.882503033 CET	49756	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:22:50.920033932 CET	443	49755	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:50.920120955 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:50.926029921 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:50.926057100 CET	443	49755	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:50.926492929 CET	443	49755	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:50.951581001 CET	59518	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:22:50.956435919 CET	53	59518	1.1.1.1	192.168.2.24
Jan 10, 2025 16:22:50.956530094 CET	59518	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:22:50.961481094 CET	53	59518	1.1.1.1	192.168.2.24
Jan 10, 2025 16:22:50.981508017 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:51.406323910 CET	59518	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:22:51.411292076 CET	53	59518	1.1.1.1	192.168.2.24
Jan 10, 2025 16:22:51.411336899 CET	59518	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:22:52.214768887 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:52.214835882 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:52.214849949 CET	443	49755	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:52.214972019 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:52.255372047 CET	443	49755	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:52.391391039 CET	443	49755	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:52.391602039 CET	443	49755	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:52.391659975 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:52.392276049 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:52.392297983 CET	443	49755	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:52.392311096 CET	49755	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:53.012684107 CET	59520	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:53.012763023 CET	443	59520	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:53.012989044 CET	59520	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:53.014070988 CET	59520	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:53.014094114 CET	443	59520	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:53.835529089 CET	443	59520	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:53.835669041 CET	59520	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:53.838516951 CET	59520	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:53.838546038 CET	443	59520	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:53.838910103 CET	443	59520	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:53.843033075 CET	59520	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:53.843082905 CET	59520	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:53.843095064 CET	443	59520	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:53.843202114 CET	59520	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:53.883337021 CET	443	59520	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:54.019098043 CET	443	59520	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:54.019222975 CET	443	59520	40.113.103.199	192.168.2.24
Jan 10, 2025 16:22:54.019345045 CET	59520	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:54.019546986 CET	59520	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:22:54.019571066 CET	443	59520	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:00.098212957 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:00.098261118 CET	443	59521	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:00.098337889 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:00.099226952 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:00.099236012 CET	443	59521	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:00.880733013 CET	443	59521	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:00.880819082 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:01.314747095 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:01.314795017 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:01.314904928 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:01.315790892 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:01.315812111 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:01.558409929 CET	58976	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:01.563442945 CET	53	58976	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:01.563544035 CET	58976	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:01.568618059 CET	53	58976	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:01.957489967 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:01.957580090 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:01.977050066 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:01.977082014 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:01.977564096 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:01.977632046 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:01.978454113 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:01.978518963 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:01.978574038 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:01.978699923 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:02.015614033 CET	58976	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:02.020853996 CET	53	58976	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:02.020939112 CET	58976	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:02.023327112 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:02.283045053 CET	58978	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:02.283138990 CET	443	58978	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:02.283236980 CET	58978	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:02.284142971 CET	58978	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:02.284177065 CET	443	58978	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:02.475908041 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:02.475946903 CET	443	59521	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:02.477683067 CET	443	59521	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:02.477758884 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:02.479406118 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:02.479500055 CET	443	59521	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:02.479545116 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:02.479553938 CET	443	59521	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:02.479588985 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:02.479680061 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:02.479815006 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:02.479834080 CET	443	59521	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:02.480374098 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:02.480407953 CET	443	59521	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:02.480469942 CET	59521	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:02.976762056 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:02.976794958 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:02.976809978 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:02.976830959 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:02.976838112 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:02.976886034 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:02.976907969 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:02.976938009 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.106674910 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.106723070 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.106756926 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.106802940 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.106822014 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.106848001 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.107728958 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.107753038 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.107822895 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.107840061 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.107877970 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.143641949 CET	443	58978	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:03.143712997 CET	58978	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:03.146641970 CET	58978	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:03.146656990 CET	443	58978	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:03.147118092 CET	443	58978	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:03.150803089 CET	58978	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:03.150875092 CET	58978	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:03.150882006 CET	443	58978	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:03.151052952 CET	58978	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:03.175307035 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.175401926 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.175445080 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.175494909 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.176023006 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.176060915 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.176083088 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.176099062 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.176121950 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.176142931 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.195336103 CET	443	58978	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:03.198538065 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.198555946 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.198630095 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.198668957 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.198688984 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.198717117 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.201946974 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.201992035 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.202039003 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.202095985 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.202132940 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.202157974 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.202172041 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.202228069 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.219959974 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.220010042 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.220047951 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.220078945 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.220112085 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.220153093 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.266946077 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.267047882 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.267091036 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.267138958 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.267643929 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.267713070 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.267715931 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.267744064 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.267770052 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.267781973 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.267936945 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.268002987 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.268012047 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.268055916 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.288870096 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.288891077 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.288957119 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.289024115 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.289052963 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.289057970 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.289083958 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.289098024 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.289124012 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.289141893 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.293095112 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.293139935 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.293173075 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.293198109 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.293215990 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.293234110 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.294214964 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.294281006 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.294297934 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.294337988 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.307404995 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.307454109 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.307492018 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.307528973 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.307545900 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.307566881 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.313853979 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.313924074 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.313942909 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.313996077 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.330869913 CET	443	58978	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:03.331058025 CET	443	58978	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:03.331127882 CET	58978	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:03.331218958 CET	58978	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:03.331263065 CET	443	58978	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:03.357314110 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.357373953 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.357418060 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.357472897 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.357501984 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.357533932 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.357570887 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.357629061 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.357640982 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.357688904 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.358211040 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.358254910 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.358280897 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.358297110 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.358321905 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.358334064 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.358339071 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.358364105 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.358385086 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.358421087 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.358429909 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.358470917 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.379089117 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.379117012 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.379203081 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.379208088 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.379236937 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.379256010 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.379293919 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.379301071 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.379343033 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.379343987 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.379391909 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.379618883 CET	59523	443	192.168.2.24	104.126.37.201
Jan 10, 2025 16:23:03.379633904 CET	443	59523	104.126.37.201	192.168.2.24
Jan 10, 2025 16:23:03.625967026 CET	49732	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:03.628757000 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:03.628825903 CET	443	58979	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:03.628900051 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:03.631154060 CET	443	49732	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:03.631165981 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:03.631201982 CET	443	58979	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:03.631227970 CET	49732	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:03.883919954 CET	58980	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:03.884015083 CET	443	58980	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:03.884105921 CET	58980	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:03.884382963 CET	58980	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:03.884418964 CET	443	58980	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.175911903 CET	58981	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.175913095 CET	58982	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.175973892 CET	443	58981	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.175978899 CET	443	58982	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.176069021 CET	58981	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.176198006 CET	58982	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.176230907 CET	58982	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.176239967 CET	443	58982	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.176515102 CET	58981	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.176533937 CET	443	58981	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.284616947 CET	443	58979	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.284702063 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.301825047 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.301862955 CET	443	58979	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.305124044 CET	443	58979	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.305248022 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.311194897 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.311362982 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.311441898 CET	443	58979	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.311523914 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.311547041 CET	443	58979	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.311603069 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.311836004 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.311885118 CET	58979	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.366589069 CET	443	58980	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.366971970 CET	58980	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.367007017 CET	443	58980	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.368486881 CET	443	58980	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.368547916 CET	58980	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.376131058 CET	58980	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.376297951 CET	443	58980	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.376538038 CET	58983	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.376586914 CET	443	58983	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.376657963 CET	58983	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.376837969 CET	58984	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.376873970 CET	443	58984	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.376933098 CET	58984	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.377016068 CET	58980	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.377042055 CET	443	58980	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.377309084 CET	58984	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.377309084 CET	58983	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.377324104 CET	443	58984	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.377331972 CET	443	58983	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.425501108 CET	58980	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.491238117 CET	443	58980	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.491353989 CET	443	58980	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.491689920 CET	58980	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.492096901 CET	58980	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.492121935 CET	443	58980	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.638797998 CET	443	58982	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.639725924 CET	58982	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.639791012 CET	443	58982	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.641249895 CET	443	58982	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.641345024 CET	58982	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.642096043 CET	58982	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.642199039 CET	443	58982	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.642227888 CET	58982	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.648735046 CET	443	58981	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.648991108 CET	58981	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.649027109 CET	443	58981	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.650052071 CET	443	58981	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.650115013 CET	58981	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.650551081 CET	58981	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.650621891 CET	443	58981	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.650682926 CET	58981	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.650695086 CET	443	58981	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.683357000 CET	443	58982	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.690514088 CET	58982	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.690541983 CET	443	58982	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.706569910 CET	58981	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.737521887 CET	58982	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.771532059 CET	443	58981	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.771810055 CET	443	58981	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.771879911 CET	58981	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.772023916 CET	58981	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.772047997 CET	443	58981	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.779198885 CET	443	58982	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.779278994 CET	443	58982	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.779340982 CET	58982	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.779476881 CET	58982	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.779503107 CET	443	58982	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.830497026 CET	443	58983	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.830801964 CET	58983	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.830828905 CET	443	58983	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.831268072 CET	443	58983	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.831681013 CET	58983	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.831754923 CET	443	58983	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.831820965 CET	58983	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.849567890 CET	443	58984	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.850347042 CET	58984	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.850406885 CET	443	58984	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.851334095 CET	443	58984	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.851392031 CET	58984	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.851893902 CET	58984	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.851948977 CET	443	58984	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.852119923 CET	58984	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.852124929 CET	443	58984	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.875334024 CET	443	58983	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.881635904 CET	58983	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.882206917 CET	58983	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.882297039 CET	443	58983	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.882359982 CET	58983	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.882657051 CET	58984	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.882730007 CET	443	58984	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:04.882771015 CET	58984	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:04.889588118 CET	58995	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:04.889630079 CET	443	58995	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:04.889686108 CET	58996	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:04.889714956 CET	443	58996	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:04.889719963 CET	58995	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:04.889776945 CET	58996	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:04.889996052 CET	58997	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:04.890033960 CET	443	58997	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:04.890090942 CET	58997	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:04.890182018 CET	58995	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:04.890194893 CET	443	58995	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:04.890310049 CET	58996	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:04.890321970 CET	443	58996	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:04.890476942 CET	58997	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:04.890486956 CET	443	58997	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:04.890790939 CET	58998	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.890803099 CET	443	58998	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.890847921 CET	58998	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.890923023 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.890933037 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.890997887 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891031981 CET	59000	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891067982 CET	443	59000	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.891112089 CET	59000	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891211033 CET	59001	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891243935 CET	443	59001	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.891329050 CET	59002	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891335964 CET	59001	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891341925 CET	443	59002	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.891386986 CET	59002	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891463041 CET	59003	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891470909 CET	443	59003	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.891562939 CET	58998	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891576052 CET	443	58998	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.891581059 CET	59003	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891686916 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891695976 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.891799927 CET	59000	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891815901 CET	443	59000	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.891875029 CET	59001	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891885996 CET	443	59001	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.891972065 CET	59002	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.891983032 CET	443	59002	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:04.892061949 CET	59003	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:04.892066956 CET	443	59003	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.513184071 CET	443	59003	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.513462067 CET	59003	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.513493061 CET	443	59003	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.514415026 CET	443	59002	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.514715910 CET	59002	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.514733076 CET	443	59002	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.515276909 CET	443	59003	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.515328884 CET	59003	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.516100883 CET	443	59002	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.516150951 CET	59002	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.519073963 CET	59003	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.519134998 CET	443	59003	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.519186020 CET	59002	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.519227028 CET	443	59002	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.519349098 CET	59003	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.519360065 CET	443	59003	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.519412994 CET	59002	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.519419909 CET	443	59002	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.521569014 CET	59003	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.521600962 CET	443	59003	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.521687984 CET	443	59003	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.521733046 CET	59003	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.521749020 CET	59003	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.527573109 CET	59002	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.527606010 CET	443	59002	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.527648926 CET	59002	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.546258926 CET	443	58995	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.546619892 CET	58995	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.546654940 CET	443	58995	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.548897028 CET	443	59000	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.549074888 CET	59000	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.549096107 CET	443	59000	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.549935102 CET	443	59000	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.549978971 CET	59000	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.550544024 CET	59000	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.550581932 CET	443	59000	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.551388025 CET	443	58995	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.551476955 CET	58995	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.552025080 CET	443	59001	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.552314043 CET	59001	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.552339077 CET	443	59001	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.553170919 CET	443	59001	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.553219080 CET	59001	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.553534031 CET	59001	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.553818941 CET	58995	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.553877115 CET	443	59001	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.553988934 CET	443	58995	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.554393053 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.554749012 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.554761887 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.555598974 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.555658102 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.556092978 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.556212902 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.556217909 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.556410074 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.556844950 CET	443	58998	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.557012081 CET	58998	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.557025909 CET	443	58998	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.557853937 CET	443	58998	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.557920933 CET	58998	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.558289051 CET	58998	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.558330059 CET	443	58998	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.562553883 CET	443	58997	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.562737942 CET	58997	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.562743902 CET	443	58997	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.563854933 CET	443	58996	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.564109087 CET	58996	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.564116001 CET	443	58996	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.564568043 CET	443	58997	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.564625025 CET	58997	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.564941883 CET	443	58996	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.564946890 CET	58997	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.565001965 CET	58996	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.565021992 CET	443	58997	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.565588951 CET	58996	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.565632105 CET	443	58996	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.597490072 CET	59000	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.597495079 CET	59001	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.597497940 CET	443	59000	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.597503901 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.597511053 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.597511053 CET	58995	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.597520113 CET	443	59001	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.597537041 CET	443	58995	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.612494946 CET	58997	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.612498045 CET	58998	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.612504005 CET	443	58997	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.612514973 CET	443	58998	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.612526894 CET	58996	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.612533092 CET	443	58996	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:05.644511938 CET	59000	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.644522905 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.644535065 CET	58995	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.648199081 CET	59001	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.660480976 CET	58998	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.660499096 CET	58996	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.660502911 CET	58997	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:05.828164101 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.828224897 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.828258038 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.828392029 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:05.828491926 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.829129934 CET	58999	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:05.829144955 CET	443	58999	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:06.112452984 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.112494946 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.112535954 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.112574100 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.112581015 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.112621069 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.112754107 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.112761974 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.112811089 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.113017082 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.113040924 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.113107920 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.113554955 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.113562107 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.114238024 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.114252090 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.114372969 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.114382029 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.114490986 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.114501953 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.114880085 CET	59013	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.114914894 CET	443	59013	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.115063906 CET	59013	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.115118027 CET	59014	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.115149975 CET	443	59014	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.115205050 CET	59014	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.115575075 CET	59015	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.115582943 CET	443	59015	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.115699053 CET	59016	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.115708113 CET	443	59016	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.115717888 CET	59015	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.115751982 CET	59016	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.115855932 CET	59017	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.115864992 CET	443	59017	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.115900040 CET	59017	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.116122961 CET	59018	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.116157055 CET	443	59018	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.116205931 CET	59018	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.116250038 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.116278887 CET	443	59019	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.116336107 CET	59020	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.116358042 CET	443	59020	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.116372108 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.116395950 CET	59020	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.116683960 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.116700888 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.116852999 CET	59022	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.116863012 CET	443	59022	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.116908073 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.116926908 CET	59022	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.117274046 CET	59023	443	192.168.2.24	108.139.47.92
Jan 10, 2025 16:23:06.117283106 CET	443	59023	108.139.47.92	192.168.2.24
Jan 10, 2025 16:23:06.117439985 CET	59013	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.117466927 CET	443	59013	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.117480993 CET	59023	443	192.168.2.24	108.139.47.92
Jan 10, 2025 16:23:06.117563009 CET	59014	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.117577076 CET	443	59014	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.117659092 CET	59016	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.117674112 CET	443	59016	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.117748976 CET	59015	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.117758989 CET	443	59015	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.117835999 CET	59017	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.117846012 CET	443	59017	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.117918968 CET	59018	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.117948055 CET	443	59018	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.118012905 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.118036032 CET	443	59019	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.118104935 CET	59020	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.118113041 CET	443	59020	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.118236065 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.118243933 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.118324995 CET	59022	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.118334055 CET	443	59022	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.118581057 CET	59023	443	192.168.2.24	108.139.47.92
Jan 10, 2025 16:23:06.118590117 CET	443	59023	108.139.47.92	192.168.2.24
Jan 10, 2025 16:23:06.137870073 CET	59024	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.137908936 CET	443	59024	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.137981892 CET	59024	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.138190031 CET	59024	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.138197899 CET	443	59024	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.225538015 CET	59025	443	192.168.2.24	20.110.205.119
Jan 10, 2025 16:23:06.225578070 CET	443	59025	20.110.205.119	192.168.2.24
Jan 10, 2025 16:23:06.225845098 CET	59025	443	192.168.2.24	20.110.205.119
Jan 10, 2025 16:23:06.225999117 CET	59026	443	192.168.2.24	13.107.21.237
Jan 10, 2025 16:23:06.226120949 CET	443	59026	13.107.21.237	192.168.2.24
Jan 10, 2025 16:23:06.226187944 CET	59026	443	192.168.2.24	13.107.21.237
Jan 10, 2025 16:23:06.226243019 CET	59025	443	192.168.2.24	20.110.205.119
Jan 10, 2025 16:23:06.226259947 CET	443	59025	20.110.205.119	192.168.2.24
Jan 10, 2025 16:23:06.226506948 CET	59026	443	192.168.2.24	13.107.21.237
Jan 10, 2025 16:23:06.226545095 CET	443	59026	13.107.21.237	192.168.2.24
Jan 10, 2025 16:23:06.576273918 CET	443	59017	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.576378107 CET	443	59015	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.576566935 CET	59017	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.576590061 CET	443	59017	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.576829910 CET	59015	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.576860905 CET	443	59015	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.577734947 CET	443	59017	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.577795982 CET	59017	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.577923059 CET	443	59015	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.577949047 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.577977896 CET	59015	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.578789949 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.578814983 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.579483986 CET	443	59016	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.579714060 CET	59016	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.579724073 CET	443	59016	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.579917908 CET	59017	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.580025911 CET	59015	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.580035925 CET	443	59017	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.580631018 CET	443	59015	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.580753088 CET	443	59016	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.580812931 CET	59016	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.581161976 CET	59016	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.581212044 CET	443	59016	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.583858967 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.584055901 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.584079981 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.584175110 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.584233046 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.584554911 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.584695101 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.584702969 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.584748983 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.585206032 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.585258007 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.585659027 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.585714102 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.585807085 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.585817099 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.588260889 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.588454008 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.588474035 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.588932037 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.589307070 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.589386940 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.589392900 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.604119062 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.604479074 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.604496956 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.604799986 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.605170012 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.605221987 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.605303049 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.631335020 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.632502079 CET	59017	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.632503986 CET	59015	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.632522106 CET	443	59017	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.632524014 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.632525921 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.632525921 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.632525921 CET	59016	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.632529020 CET	443	59015	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.632541895 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.632556915 CET	443	59016	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:06.647330999 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.680494070 CET	59015	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.680507898 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.680507898 CET	59016	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.680510044 CET	59017	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:06.693753004 CET	443	59023	108.139.47.92	192.168.2.24
Jan 10, 2025 16:23:06.694125891 CET	59023	443	192.168.2.24	108.139.47.92
Jan 10, 2025 16:23:06.694144964 CET	443	59023	108.139.47.92	192.168.2.24
Jan 10, 2025 16:23:06.695070982 CET	443	59023	108.139.47.92	192.168.2.24
Jan 10, 2025 16:23:06.695121050 CET	59023	443	192.168.2.24	108.139.47.92
Jan 10, 2025 16:23:06.696980000 CET	59023	443	192.168.2.24	108.139.47.92
Jan 10, 2025 16:23:06.697040081 CET	443	59023	108.139.47.92	192.168.2.24
Jan 10, 2025 16:23:06.704287052 CET	443	59014	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.704305887 CET	443	59013	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.704508066 CET	59013	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.704520941 CET	443	59013	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.704619884 CET	59014	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.704637051 CET	443	59014	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.704901934 CET	443	59013	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.704961061 CET	59013	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.704979897 CET	443	59014	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.705024958 CET	59014	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.705651045 CET	443	59013	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.705671072 CET	443	59014	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.705693007 CET	59013	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.705708981 CET	59014	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.707727909 CET	59013	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.707814932 CET	443	59013	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.708235025 CET	59014	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.708359957 CET	443	59014	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.744514942 CET	59023	443	192.168.2.24	108.139.47.92
Jan 10, 2025 16:23:06.744543076 CET	443	59023	108.139.47.92	192.168.2.24
Jan 10, 2025 16:23:06.752669096 CET	59013	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.752681017 CET	443	59013	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.760499954 CET	59014	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.760512114 CET	443	59014	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:06.791038990 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.791076899 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.791085958 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.791105032 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.791121006 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.791126966 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.791143894 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.791167021 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.791193962 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.792495966 CET	59023	443	192.168.2.24	108.139.47.92
Jan 10, 2025 16:23:06.794456959 CET	443	59022	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.794699907 CET	59022	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.794706106 CET	443	59022	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.795711040 CET	443	59022	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.795748949 CET	59022	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.795903921 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.795924902 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.795933008 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.795945883 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.795953035 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.795954943 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.795974016 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.795979977 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.795998096 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.796015978 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.796097994 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.796106100 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.796152115 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.796155930 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.798166037 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.798181057 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.798242092 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.798245907 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.798759937 CET	443	59019	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.798882961 CET	59022	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.798930883 CET	443	59022	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.799057961 CET	59022	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.799130917 CET	59022	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.799139977 CET	443	59022	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.799422026 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.799443960 CET	443	59019	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.800852060 CET	443	59019	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.800903082 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.801213980 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.801274061 CET	443	59019	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.801341057 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.801368952 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.801398993 CET	443	59019	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.805815935 CET	443	59024	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.806005001 CET	59024	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.806010962 CET	443	59024	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.806240082 CET	443	59026	13.107.21.237	192.168.2.24
Jan 10, 2025 16:23:06.806416035 CET	59026	443	192.168.2.24	13.107.21.237
Jan 10, 2025 16:23:06.806428909 CET	443	59026	13.107.21.237	192.168.2.24
Jan 10, 2025 16:23:06.806879044 CET	443	59026	13.107.21.237	192.168.2.24
Jan 10, 2025 16:23:06.806927919 CET	59026	443	192.168.2.24	13.107.21.237
Jan 10, 2025 16:23:06.807130098 CET	443	59024	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.807178020 CET	59024	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.807468891 CET	59024	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.807571888 CET	443	59024	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.807627916 CET	59024	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.807635069 CET	443	59024	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.807662010 CET	59024	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.807689905 CET	443	59024	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.807761908 CET	443	59026	13.107.21.237	192.168.2.24
Jan 10, 2025 16:23:06.807799101 CET	59026	443	192.168.2.24	13.107.21.237
Jan 10, 2025 16:23:06.808162928 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.808330059 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.808342934 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.808494091 CET	59014	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.808507919 CET	59013	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:06.809462070 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.809479952 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.809492111 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.809494019 CET	59026	443	192.168.2.24	13.107.21.237
Jan 10, 2025 16:23:06.809545994 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.809572935 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.809581995 CET	443	59026	13.107.21.237	192.168.2.24
Jan 10, 2025 16:23:06.809616089 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.809745073 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.809752941 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.809804916 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.809814930 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.809827089 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.810247898 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.810396910 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.810410023 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.810430050 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.810431004 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.810508013 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.813736916 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.813782930 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.813816071 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.813827038 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.813865900 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.815707922 CET	443	59025	20.110.205.119	192.168.2.24
Jan 10, 2025 16:23:06.815937996 CET	59025	443	192.168.2.24	20.110.205.119
Jan 10, 2025 16:23:06.815960884 CET	443	59025	20.110.205.119	192.168.2.24
Jan 10, 2025 16:23:06.816807985 CET	443	59025	20.110.205.119	192.168.2.24
Jan 10, 2025 16:23:06.816857100 CET	59025	443	192.168.2.24	20.110.205.119
Jan 10, 2025 16:23:06.818476915 CET	59025	443	192.168.2.24	20.110.205.119
Jan 10, 2025 16:23:06.818526030 CET	443	59025	20.110.205.119	192.168.2.24
Jan 10, 2025 16:23:06.824430943 CET	443	59018	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.824836969 CET	59018	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.824845076 CET	443	59018	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.826306105 CET	443	59018	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.826368093 CET	59018	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.826736927 CET	59018	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.826837063 CET	443	59018	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.826982975 CET	59018	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.826989889 CET	443	59018	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.827044964 CET	59018	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.827075958 CET	443	59018	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.835021019 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.835083961 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.835089922 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.837116003 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.837138891 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.837167978 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.837172985 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.837213039 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.840490103 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.840497971 CET	59022	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.856492043 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.856503963 CET	443	59019	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.856506109 CET	59026	443	192.168.2.24	13.107.21.237
Jan 10, 2025 16:23:06.856508017 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.856513023 CET	443	59026	13.107.21.237	192.168.2.24
Jan 10, 2025 16:23:06.856515884 CET	59024	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.856523991 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.856530905 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.872508049 CET	59025	443	192.168.2.24	20.110.205.119
Jan 10, 2025 16:23:06.872536898 CET	443	59025	20.110.205.119	192.168.2.24
Jan 10, 2025 16:23:06.872559071 CET	59018	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.873426914 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.873460054 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.873470068 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.873514891 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.873538971 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.873583078 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.873598099 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.873608112 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.873616934 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.873635054 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.874053001 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.874119997 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.874125957 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.875922918 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.875936985 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.876030922 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.876036882 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.884313107 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.884361029 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.884383917 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.884407043 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.884455919 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.885677099 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.885693073 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.885725975 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.885730028 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.885767937 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.886637926 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.886651993 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.886703968 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.886708021 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.886742115 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.888169050 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.888184071 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.888226986 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.888231039 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.888271093 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.900444984 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.900510073 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.900521994 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.900890112 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.900907993 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.900947094 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.900952101 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.900990963 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.902640104 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.902659893 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.902692080 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.902695894 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.902746916 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.902754068 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.902801991 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.903822899 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.903839111 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.903882027 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.903886080 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.903928995 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.904495001 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.904499054 CET	59026	443	192.168.2.24	13.107.21.237
Jan 10, 2025 16:23:06.904565096 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.920501947 CET	59025	443	192.168.2.24	20.110.205.119
Jan 10, 2025 16:23:06.920526981 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.922751904 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.922817945 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.922838926 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.928841114 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.928865910 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.928895950 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.928915977 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.928934097 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.929830074 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.929848909 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.929882050 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.929894924 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.929913998 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.931410074 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.931430101 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.931894064 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.931894064 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.931914091 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.937958002 CET	443	59022	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.938040018 CET	443	59022	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.938090086 CET	59022	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.938925028 CET	59022	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.938940048 CET	443	59022	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.939671040 CET	59028	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.939716101 CET	443	59028	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.939773083 CET	59028	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.940279007 CET	59028	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.940290928 CET	443	59028	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.950989008 CET	443	59020	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.951205015 CET	59020	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.951212883 CET	443	59020	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.952263117 CET	443	59020	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.952310085 CET	59020	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.952863932 CET	59020	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.952948093 CET	443	59020	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.953099966 CET	59020	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.953104973 CET	443	59020	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.953161001 CET	59020	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.953178883 CET	443	59020	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.961980104 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.962057114 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.962083101 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.963119984 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.963136911 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.963176966 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.963188887 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.963213921 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.964561939 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.964576006 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.964636087 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.964648962 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.965621948 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.965650082 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.965686083 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.965694904 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.965737104 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.973401070 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.973509073 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.973507881 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.973546982 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.973568916 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.973704100 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.973823071 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.973967075 CET	59011	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.973978996 CET	443	59011	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.975934029 CET	443	59024	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.976023912 CET	443	59024	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.976344109 CET	59024	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.976877928 CET	59024	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.976912975 CET	443	59024	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.977200031 CET	59029	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.977242947 CET	443	59029	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.977303028 CET	59029	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.978322029 CET	59029	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.978334904 CET	443	59029	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.984505892 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.988523006 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.988615990 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.988662004 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.989685059 CET	59021	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.989701986 CET	443	59021	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.991348982 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.991410017 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.991446018 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.991461039 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.991513014 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.991836071 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.991895914 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.991904974 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.992496967 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.992536068 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.992559910 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.992572069 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.992605925 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.992757082 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.992820024 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.992827892 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.993626118 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.993664026 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.993693113 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.993705034 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.993752003 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.993885994 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.993947983 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.993957043 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:06.995081902 CET	59030	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.995107889 CET	443	59030	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.995176077 CET	59030	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.995306969 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.995826960 CET	59030	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.995836020 CET	443	59030	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.998581886 CET	443	59018	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.998780012 CET	443	59018	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:06.998856068 CET	59018	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.999125957 CET	59018	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:06.999166965 CET	443	59018	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.000498056 CET	59020	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.013415098 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.013439894 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.013478994 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.013505936 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.013516903 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.013545036 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.016499996 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.019124031 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.019188881 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.019205093 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.019843102 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.019862890 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.019900084 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.019910097 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.019938946 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.020185947 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.020246983 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.020252943 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.021171093 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.021189928 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.021224976 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.021234035 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.021260023 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.021405935 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.021473885 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.021478891 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.060173988 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.060229063 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.060261965 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.060286045 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.060314894 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.060334921 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.060475111 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.060544968 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.060550928 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.061095953 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.061137915 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.061173916 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.061180115 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.061212063 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.061557055 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.061621904 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.061626911 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.062443018 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.062484026 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.062515974 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.062521935 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.062556028 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.062638998 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.062724113 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.062731028 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.063512087 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.063551903 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.063591957 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.063613892 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.063620090 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.063651085 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.064127922 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.064172983 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.064178944 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.064644098 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.064691067 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.064713001 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.064718962 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.064749956 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.065304995 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.065367937 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.065373898 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.104914904 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.104938030 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.104996920 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.105010986 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.105046988 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.105851889 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.105897903 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.105914116 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.105921984 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.105931044 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.105947971 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.105983973 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.105993032 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.106009007 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.106030941 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.106435061 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.106450081 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.106498003 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.106506109 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.106559038 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.106872082 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.106939077 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.106946945 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.107485056 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.107500076 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.107548952 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.107554913 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.107568979 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.107592106 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.107610941 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.108203888 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.108217001 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.108264923 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.108273029 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.108308077 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.108864069 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.108932018 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.108938932 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.109683990 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.109702110 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.109769106 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.109787941 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.109806061 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.109858036 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.109862089 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.109910011 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.110565901 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.110588074 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.110616922 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.110621929 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.110646963 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.110662937 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.110826015 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.110882044 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.110886097 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.111146927 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.111187935 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.111191988 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.111507893 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.113385916 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.113406897 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.113440990 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.113449097 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.113497019 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.113502026 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.113687992 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.114146948 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.114168882 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.114197016 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.114200115 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.114228964 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.114247084 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.114249945 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.115334988 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.115362883 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.115398884 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.115403891 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.115447998 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.115453005 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.115467072 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.115480900 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.115484953 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.115499020 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.115510941 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.115540981 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.115545034 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.149051905 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.149074078 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.149116993 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.149173021 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.149178982 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.149214983 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.149300098 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.149352074 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.149358034 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.149812937 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.149827003 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.149872065 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.149877071 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.150099993 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.150155067 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.150161028 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.150660038 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.150674105 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.150738001 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.150743961 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.150909901 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.150959969 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.150965929 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.153728008 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.153744936 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.153786898 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.153791904 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.153846025 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.153883934 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.153934956 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.153939009 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.153978109 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.154431105 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.154448986 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.154517889 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.154521942 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.154562950 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.154700994 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.154750109 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.154756069 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.159492970 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.159617901 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.173207998 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.173228979 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.173269987 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.173269987 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.173284054 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.173340082 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.173351049 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.173908949 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.173923969 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.173973083 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.173995972 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.174185038 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.174227953 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.174235106 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.174730062 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.174747944 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.174803019 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.174809933 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.174983025 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.175029039 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.175039053 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.175529003 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.175544024 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.175578117 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.175591946 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.175600052 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.175631046 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.175646067 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.176273108 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.176289082 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.176353931 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.176362038 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.176398039 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.176678896 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.176734924 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.176740885 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.177139997 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.177155972 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.177201986 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.177208900 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.178534985 CET	443	59020	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.178634882 CET	443	59020	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.178689003 CET	59020	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.179176092 CET	59020	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.179194927 CET	443	59020	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.205935001 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.219892979 CET	443	59019	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.220005035 CET	443	59019	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.220293999 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.220396042 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.220419884 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.220458031 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.220479012 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.220524073 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.220724106 CET	59019	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.220767975 CET	443	59019	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.221955061 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.226280928 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.226319075 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.226351976 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.226365089 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.226407051 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.226423025 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.226427078 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.226646900 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.226671934 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.226696014 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.226700068 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.226732016 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.226824045 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.226871967 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.226877928 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.227478981 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.227497101 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.227531910 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.227539062 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.227562904 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.227655888 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.227705956 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.227710009 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.228254080 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.228272915 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.228302002 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.228308916 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.228337049 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.228553057 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.228602886 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.228607893 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.229042053 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.229059935 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.229093075 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.229100943 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.229124069 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.229249954 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.229305029 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.229310036 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.252988100 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.253057957 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.253086090 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.253113985 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.253129959 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.253156900 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.253196001 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.253248930 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.253254890 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.253781080 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.253823042 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.253842115 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.253853083 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.253890991 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.254034042 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.254101038 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.254110098 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.254689932 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.254730940 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.254746914 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.254767895 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.254803896 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.255085945 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.255142927 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.255151987 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.255697012 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.255736113 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.255770922 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.255779982 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.255805969 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.255881071 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.255930901 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.255937099 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.256416082 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.256462097 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.256500959 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.256510019 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.256537914 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.256622076 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.256675005 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.256681919 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.269519091 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.286043882 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.286099911 CET	443	59031	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.286165953 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.286349058 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.286361933 CET	443	59031	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.301518917 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.302084923 CET	59032	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.302125931 CET	443	59032	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.302191973 CET	59032	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.302405119 CET	59032	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.302422047 CET	443	59032	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.307239056 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.307352066 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.307363987 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.307570934 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.307588100 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.307617903 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.307625055 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.307657957 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.307965994 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.308024883 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.308031082 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.308060884 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.308439016 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.308458090 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.308573008 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.308579922 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.308612108 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.308818102 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.308854103 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.308870077 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.308877945 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.308916092 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.308922052 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.308943033 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.309046984 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.309107065 CET	59010	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.309118986 CET	443	59010	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.326581001 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.326648951 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.326678991 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.326692104 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.326736927 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.328950882 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.328982115 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.329014063 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.329019070 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.329051018 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.329055071 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.329354048 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.329391003 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.329404116 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.329407930 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.329437971 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.329703093 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.329720974 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.329757929 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.329762936 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.329780102 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.330210924 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.330235958 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.330256939 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.330261946 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.330287933 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.330661058 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.330681086 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.330712080 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.330717087 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.330746889 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.330964088 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.330996037 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.331015110 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.331020117 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.331041098 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.331490993 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.331511021 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.331552982 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.331557989 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.331577063 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.341464996 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.341486931 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.341557026 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.341582060 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.341634989 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.341644049 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.341701984 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.341707945 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.342175007 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.342190981 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.342231035 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.342236996 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.342283010 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.342308044 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.342411995 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.342504978 CET	59012	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.342518091 CET	443	59012	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.377513885 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.377542019 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.417325020 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.417363882 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.417398930 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.417418003 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.417471886 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.419781923 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.419801950 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.419835091 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.419858932 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.419862986 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.419970036 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.420430899 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.420450926 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.420505047 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.420509100 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.420536041 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.420830011 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.420851946 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.420878887 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.420882940 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.421255112 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.421511889 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.421534061 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.421566963 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.421571016 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.421598911 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.421809912 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.421832085 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.421855927 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.421859026 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.421888113 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.422431946 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.422451973 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.422513962 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.422518015 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.423099995 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.423124075 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.423156977 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.423161030 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.423198938 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.507817984 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.507853031 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.507899046 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.507925034 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.507945061 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.507961035 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.510411024 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.510432959 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.510487080 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.510507107 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.510519981 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.510549068 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.510552883 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.511007071 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.511034012 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.511073112 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.511084080 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.511110067 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.511635065 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.511653900 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.511683941 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.511694908 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.511718035 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.512111902 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.512135029 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.512175083 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.512197018 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.512217999 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.512609959 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.512629986 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.512676001 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.512689114 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.512710094 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.513278961 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.513308048 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.513346910 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.513356924 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.513370991 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.513853073 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.513876915 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.513907909 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.513919115 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.513951063 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.565507889 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.565542936 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.598664999 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.598706007 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.598747015 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.598773956 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.598798990 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.601172924 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.601197004 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.601228952 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.601247072 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.601269960 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.601640940 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.601666927 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.601694107 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.601701975 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.601722956 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.602288008 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.602313995 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.602385044 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.602385044 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.602392912 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.602874041 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.602899075 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.602930069 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.602935076 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.602960110 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.603382111 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.603401899 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.603435993 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.603442907 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.603472948 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.603482962 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.603533030 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.603538036 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.603624105 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.603959084 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.603979111 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.604016066 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.604022026 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.604049921 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.604063988 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.604067087 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.604590893 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.604617119 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.604646921 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.604654074 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.604676008 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.660514116 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.660546064 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.669439077 CET	443	59028	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.671865940 CET	59028	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.671880960 CET	443	59028	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.672291040 CET	443	59028	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.672673941 CET	59028	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.672743082 CET	443	59028	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.672956944 CET	59028	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.673026085 CET	59028	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.673044920 CET	443	59028	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.691390038 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.691421986 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.691479921 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.691495895 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.691517115 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.691720963 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.691749096 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.691771984 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.691777945 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.691788912 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.691797972 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.691827059 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.692207098 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.692230940 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.692277908 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.692281008 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.692305088 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.692751884 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.692775011 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.692801952 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.692805052 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.692840099 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.693156004 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.693175077 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.693201065 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.693205118 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.693224907 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.693660975 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.693686008 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.693712950 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.693717003 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.693742990 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.694070101 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.694088936 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.694113016 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.694117069 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.694140911 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.694355965 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.694380045 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.694403887 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.694407940 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.694433928 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.736272097 CET	443	59030	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.736665010 CET	59030	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.736680984 CET	443	59030	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.737056017 CET	443	59030	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.737437963 CET	59030	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.737509966 CET	443	59030	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.737766981 CET	59030	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.737862110 CET	59030	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.737885952 CET	443	59030	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.740500927 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.740516901 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.740675926 CET	443	59029	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.741034031 CET	59029	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.741055965 CET	443	59029	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.741530895 CET	443	59029	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.742008924 CET	59029	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.742008924 CET	59029	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.742019892 CET	443	59029	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.742069006 CET	59029	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.742079973 CET	443	59029	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.742134094 CET	443	59029	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.781987906 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.782017946 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.782093048 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.782123089 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.782371044 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.782413960 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.782422066 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.782427073 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.782447100 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.782454967 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.782458067 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.782493114 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.783005953 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.783029079 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.783081055 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.783086061 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.783102989 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.783442020 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.783467054 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.783504009 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.783509970 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.783540964 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.783822060 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.783840895 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.783907890 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.783912897 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.784322977 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.784348011 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.784392118 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.784395933 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.784424067 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.784657955 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.784676075 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.784735918 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.784745932 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.784951925 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.785156965 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.785178900 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.785218954 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.785223961 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.785245895 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.785273075 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.788542032 CET	59029	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.872538090 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.872565985 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.872633934 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.872659922 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.872675896 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.873100042 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.873123884 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.873126030 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.873142004 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.873147964 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.873186111 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.873191118 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.873732090 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.873749971 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.873805046 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.873809099 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.874231100 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.874253988 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.874286890 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.874290943 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.874313116 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.874924898 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.874943018 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.874989986 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.874995947 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.875430107 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.875452995 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.875490904 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.875495911 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.875516891 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.875735998 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.875751972 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.875777960 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.875782013 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.875803947 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.876208067 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.876230001 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.876276970 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.876281023 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.876297951 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.882179022 CET	443	59030	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.882277012 CET	443	59030	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.882333994 CET	59030	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.882934093 CET	59030	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.882951021 CET	443	59030	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.916500092 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.916522980 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.919706106 CET	443	59029	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.919841051 CET	443	59029	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.920022964 CET	59029	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.920442104 CET	59029	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.920458078 CET	443	59029	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.938235998 CET	443	59028	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.938317060 CET	443	59028	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.938385010 CET	59028	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.938966990 CET	59028	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.938987017 CET	443	59028	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.963510036 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.963558912 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.963599920 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.963623047 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.963625908 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.963682890 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.963689089 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.963893890 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.964071035 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.964098930 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.964132071 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.964135885 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.964168072 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.964354992 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.964359045 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.964658976 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.964684963 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.964711905 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.964716911 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.964749098 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.965115070 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.965135098 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.965171099 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.965176105 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.965205908 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.965734959 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.965758085 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.965806007 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.965811014 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.965833902 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.965852976 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.965874910 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.965878963 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.965887070 CET	443	59031	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.966231108 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.966243029 CET	443	59031	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.966495037 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.966519117 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.966551065 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.966556072 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.966583967 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.966604948 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.966626883 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.966646910 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.966650963 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.966672897 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.967339039 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.967358112 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.967391014 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.967395067 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:07.967417955 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:07.967681885 CET	443	59031	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.968018055 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.968234062 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.968234062 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.968241930 CET	443	59031	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:07.968285084 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:07.968312979 CET	443	59031	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.007704973 CET	443	59032	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.007977962 CET	59032	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.007987022 CET	443	59032	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.009464979 CET	443	59032	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.009530067 CET	59032	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.009968042 CET	59032	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.010041952 CET	443	59032	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.010174990 CET	59032	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.010251999 CET	59032	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.010258913 CET	443	59032	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.011501074 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.011563063 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.011570930 CET	443	59031	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.054229975 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.054264069 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.054316044 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.054336071 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.054366112 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.055005074 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.056358099 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.056387901 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.056438923 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.056447983 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.056478024 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.056735992 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.056737900 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.056751013 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.056773901 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.056788921 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.056796074 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.056827068 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.057169914 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.057189941 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.057221889 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.057225943 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.057245016 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.057274103 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.057276964 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.057694912 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.057725906 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.057745934 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.057749987 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.057774067 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.058170080 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.058191061 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.058228970 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.058233023 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.058258057 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.058289051 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.058311939 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.058331966 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.058336020 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.058361053 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.058880091 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.058898926 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.058934927 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.058938026 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.058958054 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.059498072 CET	59032	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.064037085 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.106977940 CET	443	59031	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.107095003 CET	443	59031	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.107502937 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.107892036 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.107892036 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.144916058 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.144956112 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.144999981 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.145004988 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.145054102 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.145746946 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.145749092 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.147126913 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.147161961 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.147192955 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.147196054 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.147226095 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.147347927 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.147396088 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.147399902 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.147784948 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.147809029 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.147845984 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.147850990 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.147875071 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.148045063 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.148071051 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.148096085 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.148101091 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.148137093 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.148653984 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.148704052 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.148746014 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.148750067 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.148791075 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.148833990 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.148866892 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.148885965 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.148889065 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.148899078 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.148957014 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.149097919 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.149218082 CET	59009	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.149230957 CET	443	59009	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:08.155050039 CET	443	59032	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.159760952 CET	443	59032	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.159845114 CET	59032	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.160116911 CET	59032	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.160125971 CET	443	59032	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:08.411505938 CET	59031	443	192.168.2.24	13.89.179.9
Jan 10, 2025 16:23:08.411540031 CET	443	59031	13.89.179.9	192.168.2.24
Jan 10, 2025 16:23:09.513163090 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.513200998 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:09.513276100 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.513516903 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.513534069 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:09.815798998 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.815848112 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:09.816061020 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.816373110 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.816381931 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.816433907 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:09.816464901 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:09.816540003 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.816770077 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.816783905 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:09.816867113 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.816987991 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.816992044 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.817003012 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:09.817025900 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:09.831975937 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.832015038 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:09.832108021 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.832314014 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.832348108 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:09.832407951 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.832688093 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.832700968 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:09.832921028 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:09.832942963 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.031497002 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.071549892 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.116486073 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.116501093 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.117012024 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.131275892 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.131335020 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.131340981 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.131458044 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.182554007 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.291980028 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.296698093 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.297991991 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.298038006 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.301593065 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.310082912 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.310110092 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.310117006 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.310142994 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.310162067 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.310174942 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.312026024 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.312026978 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.312042952 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.316016912 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.340883017 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.340909958 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.342487097 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.342546940 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.344019890 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.344455004 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.344475031 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.344480991 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.344518900 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.344528913 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.345696926 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.345752954 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.386430025 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.386462927 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.386504889 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.386549950 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.386601925 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.386620045 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.386810064 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.388978958 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.389024019 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.389136076 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.389136076 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.389153004 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.389233112 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.441302061 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.441526890 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.441546917 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.471029043 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.471051931 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.471209049 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.471225977 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.471332073 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.471342087 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.471913099 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.472023010 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.472029924 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.472124100 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.472296953 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.472320080 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.472373009 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.472713947 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.472816944 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.472836971 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.473448038 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.473501921 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.473577023 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.473592997 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.473774910 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.473774910 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.473783016 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.475187063 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.475291967 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.475429058 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.475614071 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.475629091 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.475630045 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.475790977 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.475797892 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.475862980 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.475905895 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.475908041 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.475915909 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.476459026 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.476660967 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.477343082 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.477358103 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.477981091 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.477984905 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.478326082 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.478548050 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.478554964 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.479346991 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.479352951 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.518497944 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.520795107 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.521027088 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.523322105 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.535348892 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.535348892 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.556541920 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.556555033 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.556571960 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.556612015 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.556669950 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.556688070 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.556818008 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.557543993 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.557562113 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.558518887 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.558543921 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.558573008 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.558573008 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.558583021 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.558639050 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.558639050 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.559602022 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.559623957 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.559716940 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.559722900 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.559911013 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.561232090 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.561252117 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.562239885 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.562263966 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.563153982 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.563153982 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.563153982 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.563162088 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.563318968 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.563340902 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.563359022 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.563365936 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.564022064 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.564022064 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.564029932 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.590744019 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.590780020 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.590789080 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.590817928 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.590827942 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.590833902 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.590848923 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.590934038 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.590976000 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.591002941 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.609864950 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.609882116 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.609889030 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.609921932 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.609939098 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.609950066 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.610136032 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.610136032 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.610147953 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.610472918 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.612608910 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.612622023 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.614819050 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.614826918 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.621145964 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.621182919 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.621190071 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.621208906 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.621237993 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.621239901 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.621247053 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.621263981 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.621268988 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.621290922 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.621311903 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.623158932 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.623183966 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.623193026 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.623233080 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.623236895 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.623277903 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.623303890 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.623356104 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.623356104 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.623356104 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.623364925 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.623763084 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.643508911 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.643524885 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.643563032 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.644033909 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.644049883 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.644102097 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.644126892 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.644136906 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.644150972 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.644758940 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.644783974 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.644790888 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.644805908 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.644817114 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.644817114 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.644817114 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.644817114 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.644817114 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.644826889 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.645068884 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.645091057 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.645325899 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.645778894 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.645848989 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.645931005 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.646143913 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.646167994 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.647356033 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.647356033 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.647356033 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.647356033 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.647356033 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.666074038 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.666145086 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.666184902 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.668570042 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.668597937 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.668634892 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.668673038 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.668704987 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.669322014 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.669342995 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.669399977 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.669410944 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.669569016 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.669634104 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.669667959 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.671001911 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.671036005 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.671081066 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.671089888 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.671107054 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.671418905 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.671519041 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.671570063 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.671860933 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.671977043 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.672027111 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.672174931 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.672244072 CET	59035	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.672255039 CET	443	59035	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.672450066 CET	59041	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.672480106 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.672522068 CET	59041	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.672817945 CET	59041	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.672832012 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.673255920 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.673449039 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.673456907 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.673479080 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.673491001 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.673501015 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.673512936 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.673537970 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.673544884 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.673562050 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.673572063 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.673603058 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.673629999 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.673654079 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.707032919 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.707118988 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.707170010 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.708452940 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.708468914 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.708540916 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.708566904 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.708596945 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.708693981 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.708751917 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.708767891 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.710500956 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.726507902 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.752759933 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.752795935 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.752829075 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.752845049 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.752892017 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.753757954 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.753787041 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.753823042 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.753830910 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.753858089 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.753875971 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.753895044 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.753938913 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.756844997 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.756858110 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.756911039 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.756932020 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.758502960 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.760543108 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.760565996 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.760593891 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.760605097 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.760636091 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.762202024 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.762226105 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.762262106 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.762267113 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.762315035 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.762319088 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.763051033 CET	59037	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.763078928 CET	443	59037	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.763622999 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.763662100 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.763717890 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.763804913 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.763827085 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.763854980 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.763859034 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.763901949 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.763906002 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.763938904 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.764532089 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.764597893 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.764619112 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.765527010 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.765539885 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.766174078 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.766199112 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.766225100 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.766230106 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.766273975 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.767026901 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.767086029 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.767088890 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.767124891 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.776482105 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.776550055 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.776577950 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.776623011 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.776873112 CET	59038	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.776911974 CET	443	59038	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.795831919 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.795854092 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.795891047 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.795898914 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.795945883 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.796958923 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.796976089 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.797004938 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.797008991 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.797049046 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.797055006 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.797950983 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.797971964 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.797997952 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.798002005 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.798041105 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.798216105 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.798258066 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.798264027 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.798294067 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.798981905 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.799041986 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.799047947 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.853765965 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.858285904 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.858303070 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.858345032 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.858371973 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.858387947 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.858408928 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.858798027 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.858846903 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.859390974 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.859436989 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.859441042 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.859483957 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.859484911 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.859519005 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.859802961 CET	59034	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.859817982 CET	443	59034	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.862813950 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.862853050 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.862901926 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.863161087 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.863174915 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.884346008 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.884370089 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.884408951 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.884433985 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.884453058 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.884483099 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.884994984 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.885016918 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.885046959 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.885052919 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.885101080 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.885222912 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.885267973 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.885274887 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.885963917 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.885982037 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.886008978 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.886017084 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.886053085 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.886183023 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.886229038 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.886235952 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.886265039 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.887078047 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.887094975 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.887130976 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.887140036 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.887181044 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.887639046 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.887689114 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.887697935 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.888144970 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.888160944 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.888187885 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.888196945 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.888235092 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.888782978 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.888837099 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.888848066 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.888879061 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.949506044 CET	59033	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.949534893 CET	443	59033	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.972526073 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.972556114 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.972609043 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.972632885 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.972659111 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.972681999 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.972810984 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.972868919 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.972875118 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.973359108 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.973376989 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.973407030 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.973412037 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.973453045 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.973712921 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.973763943 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.973769903 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.973800898 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.974073887 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.974092007 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.974118948 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.974123001 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.974154949 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.974283934 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.974344969 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:10.974380970 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.974596024 CET	59036	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.974606991 CET	443	59036	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.133760929 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.134156942 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.134177923 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.134475946 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.134855986 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.134915113 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.134927034 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.135001898 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.135330915 CET	59041	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.135358095 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.135705948 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.136121988 CET	59041	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.136194944 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.136271954 CET	59041	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.175334930 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.183341980 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.241327047 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.241588116 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.241619110 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.241683006 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.241708040 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.241727114 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.241779089 CET	59041	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.241802931 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.241838932 CET	59041	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.242158890 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.242223024 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.242258072 CET	59041	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.242738962 CET	59041	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.242755890 CET	443	59041	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.243055105 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.243122101 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.243724108 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.243829012 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.244177103 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.244189024 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.284523010 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.284956932 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.284997940 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.285270929 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.285270929 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.285300970 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.325057030 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.325347900 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.325376034 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.326392889 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.326466084 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.326853991 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.326932907 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.327207088 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.327255011 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.327300072 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.327307940 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.327311039 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.327537060 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.327552080 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.331835985 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.331861973 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.331877947 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.331907988 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.331922054 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.331943989 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.331974983 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.332056046 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.332112074 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.332115889 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.334058046 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.334074974 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.334116936 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.334125042 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.334151030 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.355480909 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.355518103 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.355528116 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.355547905 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.355572939 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.355578899 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.355650902 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.355689049 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.355690002 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.355722904 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.380506992 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.380614996 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.421662092 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.421760082 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.421782017 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.421796083 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.421818972 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.421850920 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.421859026 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.421890974 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.423206091 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.423226118 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.423265934 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.423275948 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.423300982 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.423321962 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.423392057 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.423439980 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.423444033 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.423491001 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.423527956 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.438575983 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.438672066 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.438724995 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.440628052 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.440654039 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.440764904 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.440803051 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.455512047 CET	59039	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.455539942 CET	443	59039	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.459005117 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.459044933 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.459105015 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.459299088 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.459319115 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.492532969 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.526237011 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.526308060 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.526334047 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.527066946 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.527091026 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.527126074 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.527141094 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.527162075 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.527179003 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.527905941 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.527941942 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.527968884 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.527981997 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.528002977 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.528048038 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.528085947 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.528177023 CET	59042	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.528191090 CET	443	59042	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.581537008 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.581607103 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.581613064 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.581665993 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.581674099 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.581712008 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.581737995 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.581770897 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.581794977 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.581794977 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.581878901 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.581974983 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.582022905 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.582034111 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.583841085 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.583857059 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.583921909 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.583937883 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.635725975 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.669903040 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.669998884 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.670066118 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.670422077 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.670452118 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.670509100 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.670521021 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.670533895 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.670654058 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.670932055 CET	59043	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.670965910 CET	443	59043	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.750180006 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.750767946 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.750787020 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.751120090 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.752106905 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.752178907 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.752368927 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.787415981 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.788559914 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.788582087 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.789777994 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.790245056 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.790422916 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.790430069 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.795325994 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.796025991 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.835331917 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.842529058 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.917601109 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.918469906 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.918488979 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.919234037 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.919640064 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.919734001 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:11.919740915 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.919761896 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:11.970604897 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.006963968 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.007030964 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.007051945 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.007091045 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.007111073 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.007158995 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.007158995 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.007170916 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.007224083 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.007337093 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.019804955 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.019853115 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.019860983 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.019911051 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.019946098 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.019948006 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.019964933 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.019979000 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.019979000 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.020878077 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.035103083 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.035172939 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.035197020 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.035234928 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.035254002 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.035259962 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.035278082 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.035284042 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.035306931 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.035325050 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.035339117 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.037548065 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.102967978 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.103141069 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.103169918 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.103189945 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.103223085 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.103241920 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.104140043 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.104159117 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.104273081 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.104281902 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.104553938 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.104608059 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.104635000 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.104640961 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.104990959 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.105412960 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.105585098 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.105592966 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.107038021 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.107115984 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.107125044 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.120630026 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.120805025 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.120832920 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.122272968 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.122288942 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.122622013 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.122631073 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.123354912 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.123425007 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.123431921 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.146584034 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.162552118 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.178534031 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.190088034 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.190160036 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.190254927 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.190254927 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.190279961 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.190359116 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.190473080 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.190479994 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191216946 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191262960 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191293955 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.191293955 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191298962 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191327095 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191329956 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191354036 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.191356897 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.191365957 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191386938 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191391945 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.191400051 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.191406965 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191421032 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.191426039 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191467047 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.191467047 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.191874027 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191893101 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.191967010 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.191967010 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.191981077 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.192358971 CET	59045	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.192375898 CET	443	59045	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.192660093 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.192805052 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.192815065 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.207237005 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.207307100 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.207366943 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.207376003 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.207397938 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.207453012 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.207458973 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.208831072 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.208882093 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.208911896 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.208919048 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.209001064 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.209968090 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.210007906 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.210047960 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.210058928 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.210067034 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.242672920 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.258550882 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.258558035 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278023005 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278048992 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278090954 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278109074 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278125048 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278139114 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.278142929 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278193951 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.278193951 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.278285980 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278589964 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278608084 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278647900 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278672934 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.278672934 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.278681040 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278702974 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.278728008 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.278728008 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.278989077 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.279195070 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.279201984 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.279925108 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.279968977 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.280009985 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.280030012 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.280036926 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.280057907 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.280059099 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.280164003 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.280235052 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.280241013 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.281070948 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.281133890 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.281200886 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.281200886 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.281207085 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.282042980 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.282084942 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.282160044 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.282160044 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.282174110 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.293493986 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.293562889 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.293574095 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.293596983 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.293622017 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.293881893 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.293946981 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.293961048 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.294316053 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.294358015 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.294393063 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.294400930 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.294435024 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.294912100 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.294991970 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.294998884 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.295871973 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.295914888 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.295933962 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.295947075 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.295973063 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.296087027 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.296196938 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.296205044 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.297012091 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.297055006 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.297096014 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.297102928 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.297152996 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.297219038 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.297329903 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.297338963 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.338536978 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.338536978 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.365463018 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.365478039 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.365505934 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.365520000 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.365521908 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.365545034 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.365550995 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.365607023 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.365607023 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.366017103 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.366025925 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.366141081 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.366148949 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.366668940 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.366693974 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.366698980 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.366724014 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.366766930 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.366766930 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.366774082 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.366962910 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.367029905 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.367038012 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.367633104 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.367647886 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.367784023 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.367795944 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.368072987 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.368125916 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.368143082 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.368367910 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.368668079 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.368684053 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.368773937 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.368778944 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.369064093 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.369093895 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.369122982 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.369138956 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.369211912 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.369266987 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.369266987 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.369276047 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.369889021 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.369904041 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.369961977 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.369966984 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.370024920 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.380105972 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.380131960 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.380167961 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.380197048 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.380212069 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.380301952 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.380368948 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.380481958 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.380487919 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.381006956 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.381022930 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.381067991 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.381078005 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.381104946 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.381292105 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.381350040 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.381356001 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.381782055 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.381795883 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.381886959 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.381896019 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.382100105 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.382292986 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.382364988 CET	59046	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.382380962 CET	443	59046	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.418550968 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.482841969 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:12.482937098 CET	443	59047	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:12.483016968 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:12.483999014 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:12.484038115 CET	443	59047	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:12.499358892 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.499413967 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.499485016 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.499707937 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.499722004 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.576642990 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.576659918 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.576762915 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.576781034 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.577303886 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.577343941 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.577370882 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.577378035 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.577424049 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.577424049 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.577430964 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.577670097 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.577704906 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.577719927 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.577732086 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.577747107 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.577756882 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.577792883 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.577792883 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.578140020 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.578157902 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.578250885 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.578258038 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.578263044 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.578378916 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.578388929 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.579112053 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.579128027 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.579222918 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.579277039 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.579277039 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.579286098 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.579375029 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.579857111 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.579870939 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.579952002 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.579957008 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.580027103 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.580147982 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.580163002 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.580197096 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.580212116 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.580249071 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.580249071 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.580929995 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.580945969 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.581043959 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.581048012 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.581132889 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.581181049 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.581181049 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.581186056 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.581243038 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.581361055 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.581676960 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.581743956 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.581748962 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.581790924 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:12.581815958 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.581887007 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.585199118 CET	59044	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:12.585213900 CET	443	59044	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.029151917 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.045368910 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.045397043 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.045917034 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.052256107 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.052392006 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.053035021 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.095338106 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.234577894 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.234601021 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.234616041 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.234699011 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.234724045 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.234776974 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.247014046 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.247114897 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.247137070 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.249239922 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.249259949 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.249324083 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.249340057 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.295526028 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.333036900 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.333111048 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.333128929 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.334310055 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.334327936 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.334367990 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.334378004 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.334407091 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.335454941 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.335470915 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.335527897 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.335540056 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.335565090 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.337279081 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.337295055 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.337363958 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.337376118 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.339752913 CET	443	59047	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:13.339828014 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.342787981 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.342807055 CET	443	59047	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:13.343246937 CET	443	59047	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:13.343297005 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.344321966 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.344393015 CET	443	59047	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:13.344439030 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.344679117 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.344814062 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.344835043 CET	443	59047	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:13.391546011 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.420155048 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.420175076 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.420238972 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.420238972 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.420269012 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.420315027 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.420322895 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.420378923 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.420387983 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.421165943 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.421180010 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.421226978 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.421241045 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.421801090 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.421849966 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.421859980 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.422699928 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.422713995 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.422766924 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.422780991 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.423002005 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.423067093 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.423077106 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.424387932 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.424400091 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.424439907 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.424458981 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.424496889 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.424587965 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.424633980 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.424640894 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.424680948 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.506639957 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.506663084 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.506727934 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.506798983 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.506829023 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.506835938 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.506858110 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.506877899 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.506902933 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.506927013 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.507437944 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.507456064 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.507518053 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.507531881 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.507580042 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.507741928 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.507797956 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.507811069 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.508266926 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.508284092 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.508337975 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.508351088 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.508585930 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.508661032 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.508673906 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.509102106 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.509152889 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.509330988 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.514760017 CET	59048	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:13.514785051 CET	443	59048	184.28.190.83	192.168.2.24
Jan 10, 2025 16:23:13.577619076 CET	443	59047	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:13.577681065 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.577708006 CET	443	59047	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:13.577725887 CET	443	59047	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:13.577744961 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.577768087 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.577814102 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.577828884 CET	443	59047	20.189.173.11	192.168.2.24
Jan 10, 2025 16:23:13.577838898 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.577862978 CET	59047	443	192.168.2.24	20.189.173.11
Jan 10, 2025 16:23:13.851687908 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:13.851736069 CET	443	59049	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:13.851814032 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:13.852869034 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:13.852884054 CET	443	59049	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:14.351708889 CET	443	59049	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:14.351790905 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.353564978 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.353599072 CET	443	59049	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:14.353969097 CET	443	59049	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:14.354028940 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.354999065 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.355081081 CET	443	59049	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:14.355150938 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.355192900 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.395337105 CET	443	59049	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:14.543056011 CET	443	59049	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:14.543135881 CET	443	59049	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:14.543138027 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.543205023 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.544790983 CET	59049	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.544831038 CET	443	59049	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:14.801415920 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.801518917 CET	443	59050	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:14.801614046 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.802530050 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:14.802567005 CET	443	59050	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:15.291600943 CET	443	59050	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:15.291685104 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.293159008 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.293171883 CET	443	59050	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:15.293544054 CET	443	59050	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:15.293591976 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.294358969 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.294428110 CET	443	59050	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:15.294488907 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.294564009 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.339335918 CET	443	59050	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:15.425636053 CET	443	59050	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:15.425714016 CET	443	59050	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:15.425714016 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.425779104 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.427628994 CET	59050	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.427670956 CET	443	59050	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:15.570580959 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.570631981 CET	443	59051	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:15.570749998 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.679299116 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:15.679394007 CET	443	59051	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:16.164690018 CET	443	59051	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:16.164778948 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:16.166426897 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:16.166446924 CET	443	59051	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:16.166810036 CET	443	59051	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:16.166857004 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:16.167853117 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:16.167922020 CET	443	59051	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:16.167962074 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:16.167998075 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:16.211338043 CET	443	59051	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:16.341272116 CET	443	59051	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:16.341355085 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:16.341392040 CET	443	59051	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:16.341438055 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:16.341471910 CET	443	59051	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:16.341531992 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:16.368652105 CET	59051	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:16.368737936 CET	443	59051	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:16.746371984 CET	59054	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:16.746404886 CET	443	59054	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:16.746510029 CET	59054	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:16.748919964 CET	59054	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:16.748935938 CET	443	59054	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:16.858906031 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:16.858957052 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:16.859186888 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:16.860270023 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:16.860282898 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.441247940 CET	443	59054	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:17.441752911 CET	59054	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:17.441771030 CET	443	59054	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:17.442873001 CET	443	59054	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:17.442926884 CET	59054	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:17.445300102 CET	59054	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:17.445415020 CET	443	59054	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:17.445574999 CET	59054	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:17.445585012 CET	443	59054	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:17.498549938 CET	59054	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:17.518141985 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.518233061 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.519562006 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.519572973 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.520690918 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.520768881 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.522177935 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.522262096 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.524072886 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.524080038 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.524120092 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.524538994 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.571351051 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.573088884 CET	443	59054	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:17.573179960 CET	443	59054	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:17.574810028 CET	59054	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:17.574841022 CET	443	59054	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:17.574856043 CET	59054	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:17.574889898 CET	59054	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:17.575725079 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:17.575853109 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:17.575941086 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:17.576306105 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:17.576347113 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:17.828942060 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.828983068 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.829000950 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.829102993 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.829123974 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.829173088 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.910868883 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.910902023 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.911035061 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.911060095 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.911103010 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.941751003 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.941787958 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.941891909 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.941926003 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.941951990 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.944071054 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.983561039 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.983592987 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.983717918 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.983736992 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:17.983748913 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:17.983774900 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.227241993 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.231822968 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.231888056 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.232424974 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.240745068 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.240881920 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.240885019 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.283350945 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.290566921 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.446439028 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.446479082 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.446487904 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.446527004 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.446547985 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.446552038 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.446557045 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.446599960 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.446624041 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.446624041 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.446649075 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.465560913 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.465629101 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.465635061 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.465667009 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.465689898 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.465691090 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.465713024 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.465734959 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.466650963 CET	59059	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.466680050 CET	443	59059	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.475400925 CET	59062	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.475441933 CET	443	59062	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.475492001 CET	59062	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.475876093 CET	59062	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.475889921 CET	443	59062	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.476371050 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.476397991 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.476459026 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.476769924 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.476780891 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.477555037 CET	59064	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.477591038 CET	443	59064	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.477782965 CET	59064	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.478235006 CET	59064	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.478247881 CET	443	59064	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.506874084 CET	59065	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.506926060 CET	443	59065	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.506989002 CET	59065	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.508215904 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.508254051 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.508300066 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.508727074 CET	59065	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.508742094 CET	443	59065	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.509147882 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:18.509160042 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:18.547255993 CET	59069	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:18.547308922 CET	443	59069	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:18.547374010 CET	59069	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:18.548257113 CET	59069	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:18.548269033 CET	443	59069	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:18.683168888 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.683185101 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.683212996 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.683248997 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.683265924 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.683309078 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.694284916 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.694308043 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.694358110 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.694372892 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.694427013 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.707345009 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.707370043 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.707412004 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.707426071 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.707454920 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.707473993 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.719742060 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.719768047 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.719831944 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.719846964 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.719885111 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.825335979 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.825362921 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.825429916 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.825452089 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.825500011 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.825520039 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.841202974 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.841234922 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.841301918 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.841324091 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.841383934 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.855882883 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.855911016 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.855952978 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.855973959 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.856013060 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.856034040 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.865442991 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.865468979 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.865559101 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.865580082 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.865618944 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.877206087 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.877230883 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.877276897 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.877299070 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.877330065 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.877357960 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.878621101 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.878638029 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.878694057 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.878705025 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.878747940 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.880623102 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.880639076 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.880680084 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.880691051 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.880719900 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.880742073 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.882965088 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.882992029 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.883034945 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.883043051 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.883076906 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.913513899 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.913542986 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.913588047 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.913605928 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.913649082 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.928915977 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.928944111 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.928986073 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.928998947 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.929053068 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.971605062 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.971636057 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.971690893 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.971705914 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.971760035 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.979166031 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.979183912 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.979239941 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.979254961 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.979291916 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.985316992 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.985343933 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.985388994 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.985404015 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.985438108 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.985456944 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.994596004 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.994621038 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.994664907 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.994680882 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.994719982 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.999521017 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.999542952 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.999592066 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:18.999603987 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:18.999643087 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.005567074 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.005589962 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.005629063 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.005642891 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.005681992 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.011183977 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.011209965 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.011250019 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.011260986 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.011306047 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.018625975 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.018651962 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.018683910 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.018696070 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.018734932 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.060511112 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.060540915 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.060714960 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.060744047 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.060797930 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.066757917 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.066777945 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.066896915 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.066907883 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.066953897 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.074182034 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.074212074 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.074318886 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.074345112 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.074390888 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.080296040 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.080321074 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.080367088 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.080375910 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.080418110 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.105003119 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.105031967 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.105120897 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.105137110 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.105179071 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.105499983 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.105518103 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.105556965 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.105566025 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.105597973 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.105614901 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.106064081 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.106077909 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.106134892 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.106142998 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.106179953 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.107654095 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.107670069 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.107731104 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.107747078 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.107783079 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.149631023 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.149669886 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.149947882 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.149976015 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.150079012 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.155493021 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.155522108 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.155860901 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.155886889 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.155945063 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.163090944 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.163121939 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.163188934 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.163213968 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.163237095 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.163255930 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.169137955 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.169171095 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.169213057 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.169238091 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.169254065 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.170063972 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.177438021 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.177464962 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.177537918 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.177561998 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.177603960 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.184736967 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.184801102 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.184835911 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.184856892 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.184871912 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.184892893 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.187757969 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.187783003 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.187880039 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.187894106 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.187930107 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.195039988 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.195060968 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.195154905 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.195177078 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.195219040 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.196562052 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.196877956 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.196887970 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.197377920 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.197706938 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.197839975 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.197849989 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.202091932 CET	443	59064	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.202131987 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.202161074 CET	443	59065	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.202481031 CET	59064	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.202492952 CET	443	59064	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.202671051 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.202677011 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.202827930 CET	59065	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.202851057 CET	443	59065	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.203548908 CET	443	59064	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.203618050 CET	59064	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.203896999 CET	443	59065	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.203949928 CET	59065	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.204109907 CET	59064	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.204174995 CET	443	59064	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.204180956 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.204233885 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.204483032 CET	59065	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.204570055 CET	443	59065	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.204890013 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.204977036 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.205025911 CET	59064	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.205030918 CET	443	59064	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.205137014 CET	59065	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.205146074 CET	443	59065	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.205271006 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.205275059 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.206264973 CET	443	59062	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.206504107 CET	59062	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.206526995 CET	443	59062	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.207380056 CET	443	59062	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.207868099 CET	59062	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.207952976 CET	443	59062	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.208049059 CET	59062	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.238404989 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.238441944 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.238621950 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.238651991 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.238706112 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.243330956 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.244384050 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.244410992 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.244487047 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.244513035 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.244556904 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.246886969 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.246912003 CET	59064	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.246915102 CET	59065	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.251343012 CET	443	59062	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.251394033 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.251931906 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.251962900 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.252038956 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.252059937 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.252106905 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.257966995 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.258002043 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.258124113 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.258153915 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.258198023 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.266474962 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.266510010 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.266608953 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.266628981 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.266679049 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.273660898 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.273689032 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.273792028 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.273817062 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.273860931 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.276690006 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.276715994 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.276781082 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.276796103 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.276824951 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.276849031 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.286340952 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.286364079 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.286410093 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.286427975 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.286458969 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.286489010 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.299961090 CET	443	59064	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.300067902 CET	443	59064	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.300131083 CET	59064	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.309247971 CET	443	59062	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.309350967 CET	443	59062	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.309441090 CET	59062	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.321260929 CET	59064	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.321296930 CET	443	59064	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.322875023 CET	59062	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.322912931 CET	443	59062	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.326998949 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.327042103 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.327075005 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.327088118 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.327109098 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.327136993 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.328684092 CET	443	59065	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.328787088 CET	443	59065	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.328840971 CET	59065	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.333344936 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.333348036 CET	59065	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.333375931 CET	443	59065	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.333379984 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.333422899 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.333441019 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.333489895 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.333513021 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.338464022 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:19.338517904 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:19.338589907 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:19.338761091 CET	59071	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:19.338804007 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:19.338859081 CET	59071	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:19.339284897 CET	59071	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:19.339298964 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:19.339628935 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:19.339651108 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:19.340770960 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.340800047 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.340842962 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.340869904 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.340902090 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.340925932 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.346790075 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.346822023 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.346869946 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.346884012 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.346916914 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.346945047 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.353514910 CET	59072	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:19.353564978 CET	443	59072	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:19.353622913 CET	59072	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:19.354276896 CET	59072	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:19.354293108 CET	443	59072	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:19.355204105 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.355232954 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.355268002 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.355282068 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.355324030 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.355335951 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.362721920 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.362755060 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.362792015 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.362806082 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.362863064 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.365451097 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.365483046 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.365562916 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.365562916 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.365575075 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.365608931 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.372745037 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.372771978 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.372812986 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.372828007 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.372855902 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.372874975 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.384752989 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.384793997 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.384803057 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.384820938 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.384855032 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.384870052 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.384886026 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.384947062 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.394737959 CET	443	59069	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:19.394814968 CET	59069	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:19.399621010 CET	59069	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:19.399640083 CET	443	59069	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:19.400525093 CET	443	59069	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:19.414097071 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.414133072 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.414144039 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.414161921 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.414191961 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.414201975 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.414223909 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.414235115 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.414248943 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.414268017 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.415128946 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.415158033 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.415190935 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.415199995 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.415234089 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.416271925 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.416299105 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.416331053 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.416338921 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.416368961 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.416387081 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.419250965 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.419286013 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.419328928 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.419341087 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.419368029 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.422192097 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.422214031 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.422250032 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.422266960 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.422297001 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.422316074 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.429728985 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.429753065 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.429786921 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.429797888 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.429852962 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.433634043 CET	59069	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:19.433706045 CET	59069	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:19.433715105 CET	443	59069	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:19.433842897 CET	59069	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:19.435606003 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.435628891 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.435666084 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.435672045 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.435724974 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.444152117 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.444170952 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.444222927 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.444227934 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.444277048 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.451605082 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.451631069 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.451702118 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.451709986 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.451770067 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.454297066 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.454323053 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.454360008 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.454365015 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.454410076 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.459928989 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.461473942 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.461514950 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.461564064 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.461571932 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.461623907 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.462275982 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.462307930 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.462338924 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.462344885 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.462378025 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.462395906 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.462795019 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.462810040 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.462831974 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.462862015 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.462873936 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.462897062 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.462913036 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.479337931 CET	443	59069	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:19.501264095 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.501291037 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.501332998 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.501344919 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.501359940 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.501405001 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.501410961 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.501441956 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.501447916 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.501496077 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.505001068 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.505038977 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.505100965 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.505106926 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.505162001 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.505930901 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.505997896 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.506028891 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.506042004 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.506057978 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.506078959 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.507190943 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.507210970 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.507252932 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.507258892 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.507292032 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.507303953 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.508313894 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.508363008 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.508399963 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.508404970 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.508454084 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.509047031 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.509114981 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.509120941 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.509169102 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.509226084 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.509279966 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.511277914 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.511307955 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.511349916 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.511356115 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.511408091 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.518440008 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.518469095 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.518593073 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.518610954 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.518651009 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.524398088 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.524425030 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.524475098 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.524487019 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.524555922 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.533045053 CET	59066	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.533061028 CET	443	59066	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.533082008 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.533107996 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.533170938 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.533185959 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.533222914 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.533900976 CET	59063	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.533915997 CET	443	59063	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.540388107 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.540415049 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.540471077 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.540482044 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.540544987 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.543090105 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.543121099 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.543155909 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.543160915 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.543210983 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.551038027 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.551068068 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.551155090 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.551178932 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.551218033 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.560370922 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:19.560421944 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:19.560518026 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:19.564389944 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:19.564413071 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:19.593888044 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.593914986 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.593972921 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.593992949 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.594046116 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.599805117 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.599832058 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.599941969 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.599975109 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.600013971 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.607127905 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.607152939 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.607198954 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.607222080 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.607260942 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.608726025 CET	443	59069	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:19.608967066 CET	443	59069	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:19.609035015 CET	59069	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:19.613353968 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.613392115 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.613405943 CET	59069	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:19.613440990 CET	443	59069	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:19.613456011 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.613467932 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.613529921 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.622273922 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.622340918 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.622353077 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.622370958 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.622396946 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.622421026 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.629257917 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.629324913 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.629353046 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.629374027 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.629425049 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.632854939 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.632875919 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.632977962 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.632996082 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.633033991 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.638222933 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.638293028 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.638304949 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.638323069 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.638341904 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.638376951 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.638648987 CET	59056	443	192.168.2.24	37.19.194.80
Jan 10, 2025 16:23:19.638665915 CET	443	59056	37.19.194.80	192.168.2.24
Jan 10, 2025 16:23:19.668369055 CET	59074	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.668464899 CET	443	59074	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.668555021 CET	59074	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.668988943 CET	59074	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.669023991 CET	443	59074	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.724854946 CET	59075	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.724925041 CET	443	59075	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.725018978 CET	59075	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.725728989 CET	59075	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.725755930 CET	443	59075	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.744515896 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:19.744558096 CET	443	59076	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:19.744645119 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:19.745970011 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:19.745981932 CET	443	59076	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:19.888727903 CET	59077	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.888756990 CET	443	59077	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.888823032 CET	59077	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.889635086 CET	59078	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.889693022 CET	443	59078	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.889993906 CET	59077	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.890005112 CET	443	59077	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:19.890029907 CET	59078	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.890337944 CET	59078	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:19.890355110 CET	443	59078	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.002073050 CET	443	59072	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.008395910 CET	59072	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.008416891 CET	443	59072	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.009489059 CET	443	59072	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.009556055 CET	59072	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.014740944 CET	59072	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.014820099 CET	443	59072	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.016691923 CET	59072	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.016700983 CET	443	59072	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.065825939 CET	59072	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.148375034 CET	443	59072	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.148468018 CET	443	59072	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.148530006 CET	59072	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.149708986 CET	59072	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.149729013 CET	443	59072	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.195152044 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.196868896 CET	59071	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.196878910 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.197982073 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.198055029 CET	59071	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.199280977 CET	59071	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.199362040 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.199615002 CET	59071	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.199620962 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.202615976 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.207093954 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.207130909 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.208666086 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.208739996 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.209177017 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.209265947 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.209429026 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.213851929 CET	443	59076	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:20.213951111 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:20.221112967 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:20.221120119 CET	443	59076	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:20.221761942 CET	443	59076	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:20.222346067 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:20.229487896 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:20.229655027 CET	443	59076	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:20.229749918 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:20.229773998 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:20.234895945 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.234941006 CET	59079	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:20.234982014 CET	443	59079	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:20.235136986 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.235151052 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.235167027 CET	59079	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:20.235467911 CET	59079	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:20.235479116 CET	443	59079	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:20.236619949 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.236707926 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.237118006 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.237201929 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.237281084 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.237287045 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.240534067 CET	59071	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.251338959 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.252413034 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:20.252440929 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:20.252501965 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:20.252791882 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:20.252801895 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:20.256542921 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.256575108 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.269392014 CET	59081	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:20.269421101 CET	443	59081	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:20.269501925 CET	59081	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:20.270193100 CET	59081	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:20.270204067 CET	443	59081	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:20.271326065 CET	443	59076	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:20.276750088 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.276803970 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:20.276865959 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.277065992 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.277079105 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:20.277456999 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.277481079 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:20.277501106 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.277856112 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.277863979 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:20.287960052 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:20.287985086 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:20.288038015 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:20.288522005 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.289351940 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:20.289367914 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:20.304546118 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.351397038 CET	49745	443	192.168.2.24	2.23.242.162
Jan 10, 2025 16:23:20.353712082 CET	443	59074	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.354480982 CET	59074	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.354492903 CET	443	59074	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.354918957 CET	443	59074	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.355310917 CET	59074	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.355329037 CET	443	59076	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:20.355411053 CET	443	59074	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.355437040 CET	443	59076	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:20.355454922 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:20.355498075 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:20.355824947 CET	59074	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.356412888 CET	443	49745	2.23.242.162	192.168.2.24
Jan 10, 2025 16:23:20.356468916 CET	49745	443	192.168.2.24	2.23.242.162
Jan 10, 2025 16:23:20.399329901 CET	443	59074	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.404275894 CET	443	59075	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.408510923 CET	59075	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.408536911 CET	443	59075	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.409032106 CET	443	59075	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.409617901 CET	59075	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.409709930 CET	443	59075	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.409904003 CET	59075	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.417609930 CET	59087	443	192.168.2.24	142.251.173.156
Jan 10, 2025 16:23:20.417650938 CET	443	59087	142.251.173.156	192.168.2.24
Jan 10, 2025 16:23:20.417726040 CET	59087	443	192.168.2.24	142.251.173.156
Jan 10, 2025 16:23:20.421046972 CET	59087	443	192.168.2.24	142.251.173.156
Jan 10, 2025 16:23:20.421056986 CET	443	59087	142.251.173.156	192.168.2.24
Jan 10, 2025 16:23:20.433163881 CET	59076	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:20.433190107 CET	443	59076	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:20.452449083 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.452481031 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.452490091 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.452507973 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.452517033 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.452526093 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.452558041 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.452572107 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.452599049 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.452620983 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.453763008 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.453785896 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.453835011 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.453840017 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.453860044 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.455327034 CET	443	59075	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.466835022 CET	59089	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.466883898 CET	443	59089	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:20.466993093 CET	59089	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.467478037 CET	59089	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.467493057 CET	443	59089	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:20.472100973 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.472130060 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.472177029 CET	59071	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.472202063 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.472224951 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.472261906 CET	59071	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.499485970 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.499528885 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.499553919 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.499564886 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.499583960 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.540676117 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.540709019 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.540766001 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.540777922 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.540828943 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.542098045 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.542109013 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.542126894 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.542144060 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.542150021 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.542187929 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.543036938 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.543068886 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.543107986 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.543129921 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.543165922 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.543167114 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.543205023 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.543262959 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.543286085 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.543309927 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.543325901 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.543343067 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.543936014 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.544001102 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.544007063 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.544030905 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.544064999 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.544603109 CET	443	59074	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.544677019 CET	443	59074	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.544779062 CET	59074	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.548734903 CET	59073	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:20.548748016 CET	443	59073	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:20.549405098 CET	59074	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.549415112 CET	443	59074	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.564192057 CET	443	59077	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.564517021 CET	59077	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.564531088 CET	443	59077	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.565572977 CET	443	59077	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.565629005 CET	59077	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.566143990 CET	59077	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.566224098 CET	443	59077	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.566381931 CET	59077	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.566390038 CET	443	59077	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.574314117 CET	59090	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:20.574347019 CET	443	59090	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:20.574398994 CET	59090	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:20.575103998 CET	59090	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:20.575117111 CET	443	59090	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:20.577399969 CET	443	59075	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.577486038 CET	443	59075	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.577696085 CET	59075	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.578958988 CET	59075	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.578984022 CET	443	59075	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.582947016 CET	443	59078	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.590373039 CET	59078	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.590404034 CET	443	59078	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.591515064 CET	443	59078	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.591572046 CET	59078	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.595998049 CET	59078	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.596070051 CET	443	59078	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.596237898 CET	59078	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.620543003 CET	59077	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.636528969 CET	59078	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.636554956 CET	443	59078	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.642671108 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:20.642729044 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:20.642808914 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:20.643399000 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:20.643413067 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:20.645282030 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.645333052 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:20.645420074 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.646970034 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:20.646991014 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:20.664534092 CET	59071	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.664551020 CET	443	59071	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.665541887 CET	59070	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.665560961 CET	443	59070	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.683556080 CET	59078	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.690138102 CET	443	59077	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.690207958 CET	443	59077	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.690366030 CET	59077	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.691621065 CET	59077	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.691631079 CET	443	59077	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.693746090 CET	443	59078	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.693802118 CET	443	59078	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.693847895 CET	59078	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.704957008 CET	59078	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:20.704972029 CET	443	59078	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:20.729049921 CET	59093	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.729106903 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.729185104 CET	59093	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.729557991 CET	59093	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:20.729576111 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:20.854188919 CET	59094	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:20.854233027 CET	443	59094	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:20.857402086 CET	59094	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:20.857852936 CET	59094	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:20.857871056 CET	443	59094	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.086863995 CET	443	59079	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.087088108 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.113209009 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.116996050 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.118892908 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.129611969 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.131385088 CET	443	59081	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.131438017 CET	59079	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.161560059 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.162935019 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.177587032 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.177587986 CET	59081	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.242109060 CET	443	59087	142.251.173.156	192.168.2.24
Jan 10, 2025 16:23:21.287561893 CET	59087	443	192.168.2.24	142.251.173.156
Jan 10, 2025 16:23:21.288343906 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.288372040 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.288738012 CET	59079	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.288764000 CET	443	59079	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.288964987 CET	59087	443	192.168.2.24	142.251.173.156
Jan 10, 2025 16:23:21.288975954 CET	443	59087	142.251.173.156	192.168.2.24
Jan 10, 2025 16:23:21.289356947 CET	59081	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.289361000 CET	443	59081	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.289459944 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.289470911 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.289573908 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.289585114 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.289658070 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.289684057 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.289712906 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.289720058 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.289921045 CET	443	59079	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.289971113 CET	59079	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.290478945 CET	443	59081	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.290535927 CET	59081	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.290640116 CET	443	59087	142.251.173.156	192.168.2.24
Jan 10, 2025 16:23:21.290690899 CET	59087	443	192.168.2.24	142.251.173.156
Jan 10, 2025 16:23:21.290829897 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.290883064 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.291076899 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.291095018 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.291131020 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.291501045 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.291512966 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.291565895 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.291575909 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.293021917 CET	59079	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.293100119 CET	443	59079	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.294723988 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:21.294765949 CET	443	59095	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:21.294831991 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:21.295070887 CET	59081	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.295152903 CET	443	59081	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.296979904 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.297044039 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.297117949 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.297234058 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.297420979 CET	59087	443	192.168.2.24	142.251.173.156
Jan 10, 2025 16:23:21.297555923 CET	443	59087	142.251.173.156	192.168.2.24
Jan 10, 2025 16:23:21.298152924 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.298459053 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.298482895 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.298717022 CET	59079	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.298733950 CET	443	59079	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.298799992 CET	59081	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.298810959 CET	443	59089	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.298825979 CET	443	59081	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.298899889 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.299000978 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.299012899 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.299062014 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.299072027 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.299149036 CET	59087	443	192.168.2.24	142.251.173.156
Jan 10, 2025 16:23:21.299154997 CET	443	59087	142.251.173.156	192.168.2.24
Jan 10, 2025 16:23:21.299326897 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.299340963 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.299421072 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:21.299432039 CET	443	59095	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:21.299499989 CET	59089	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.299509048 CET	443	59089	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.300508022 CET	443	59089	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.300571918 CET	59089	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.310352087 CET	59089	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.310410976 CET	443	59089	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.310545921 CET	59089	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.310559034 CET	443	59089	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.351706028 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.351715088 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.351715088 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.351721048 CET	59087	443	192.168.2.24	142.251.173.156
Jan 10, 2025 16:23:21.351721048 CET	59079	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.351741076 CET	59081	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.351746082 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.351767063 CET	59089	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.370213032 CET	49748	443	192.168.2.24	2.23.242.162
Jan 10, 2025 16:23:21.375305891 CET	443	49748	2.23.242.162	192.168.2.24
Jan 10, 2025 16:23:21.375355959 CET	49748	443	192.168.2.24	2.23.242.162
Jan 10, 2025 16:23:21.433644056 CET	443	59090	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.434266090 CET	59090	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.434283972 CET	443	59090	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.435342073 CET	443	59090	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.435400009 CET	59090	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.436769009 CET	59090	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.436933994 CET	443	59090	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.436953068 CET	59090	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.479350090 CET	443	59090	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.479902029 CET	59090	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.479912043 CET	443	59090	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.496721029 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.499372005 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.499403954 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.501039028 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.501104116 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.502746105 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.502892971 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.503256083 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.503271103 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.505043030 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.505319118 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.505347967 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.508979082 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.509057999 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.510189056 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.510430098 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.510468960 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.510634899 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.513274908 CET	443	59087	142.251.173.156	192.168.2.24
Jan 10, 2025 16:23:21.513398886 CET	443	59087	142.251.173.156	192.168.2.24
Jan 10, 2025 16:23:21.513442993 CET	59087	443	192.168.2.24	142.251.173.156
Jan 10, 2025 16:23:21.527972937 CET	59090	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.535638094 CET	59087	443	192.168.2.24	142.251.173.156
Jan 10, 2025 16:23:21.535665035 CET	443	59087	142.251.173.156	192.168.2.24
Jan 10, 2025 16:23:21.544038057 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.560157061 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.560187101 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.587244987 CET	443	59079	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.587482929 CET	443	59079	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.587538004 CET	59079	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.588099003 CET	59079	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.588114023 CET	443	59079	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.588316917 CET	443	59081	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.588408947 CET	443	59081	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.588449955 CET	59081	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.589673996 CET	59081	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.589698076 CET	443	59081	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.590743065 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.590799093 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.590831995 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.590837002 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.590846062 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.590893984 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.590898037 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.591001987 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.591047049 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.591070890 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.591094017 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.591098070 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.591183901 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.591226101 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.591278076 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.591306925 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.591345072 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.591356039 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.593456984 CET	443	59089	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.593588114 CET	443	59089	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.593643904 CET	59089	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.596534967 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:21.597001076 CET	59093	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:21.597018957 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:21.597073078 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.597117901 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.597146988 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.597166061 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.597179890 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.597191095 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.597215891 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.597238064 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.597276926 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.597292900 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.597323895 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.597364902 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.597372055 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.597433090 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:21.598011017 CET	59093	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:21.598083973 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:21.598206997 CET	59093	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:21.603275061 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.603333950 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.603363037 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.606539011 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.618668079 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.618721962 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.618753910 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.618777990 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.618782997 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.618853092 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.618891954 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.618907928 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.618942022 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.618951082 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.618964911 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.619019032 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.619031906 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.623415947 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.623477936 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.623493910 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.639326096 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:21.640454054 CET	59089	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.640492916 CET	443	59089	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.654537916 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.670530081 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.681545973 CET	59080	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.681583881 CET	443	59080	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.682312012 CET	59084	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.682343006 CET	443	59084	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.683629036 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.685844898 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.685913086 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.685954094 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.686007977 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.701131105 CET	443	59094	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.703295946 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.703541994 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.703599930 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.703624964 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.703639984 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.703690052 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.713598013 CET	443	59090	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.713679075 CET	443	59090	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.713728905 CET	59090	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.715780020 CET	59082	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.715815067 CET	443	59082	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.717015028 CET	59094	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.717031002 CET	443	59094	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.718310118 CET	443	59094	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.718369961 CET	59094	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.718970060 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.719033957 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.719073057 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.719077110 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.719099998 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.719137907 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.719144106 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.719150066 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.719183922 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.719188929 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.719218016 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.719260931 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.719264984 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.722568989 CET	59090	443	192.168.2.24	216.58.206.46
Jan 10, 2025 16:23:21.722598076 CET	443	59090	216.58.206.46	192.168.2.24
Jan 10, 2025 16:23:21.724322081 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.724366903 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.724385977 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.730933905 CET	59096	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.731026888 CET	443	59096	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.731102943 CET	59096	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.734231949 CET	59083	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.734297037 CET	443	59083	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.738003016 CET	59096	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.738029003 CET	443	59096	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.743702888 CET	59097	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.743762016 CET	443	59097	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.743838072 CET	59097	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.749322891 CET	59097	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.749356985 CET	443	59097	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.760099888 CET	443	59095	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:21.760158062 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:21.766532898 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.783400059 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.783520937 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.783576965 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.783607960 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.783674955 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.783718109 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.783727884 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.784018040 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:21.784069061 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.797717094 CET	59094	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.797908068 CET	443	59094	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.809173107 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.809338093 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.809381008 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.809411049 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.809664965 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.809712887 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.839308023 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:21.839340925 CET	443	59095	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:21.839859962 CET	443	59095	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:21.839915991 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:21.847521067 CET	59094	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.847528934 CET	443	59094	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:21.862200022 CET	59098	443	192.168.2.24	13.32.99.65
Jan 10, 2025 16:23:21.862253904 CET	443	59098	13.32.99.65	192.168.2.24
Jan 10, 2025 16:23:21.862318993 CET	59098	443	192.168.2.24	13.32.99.65
Jan 10, 2025 16:23:21.871881008 CET	59099	443	192.168.2.24	34.111.189.158
Jan 10, 2025 16:23:21.871918917 CET	443	59099	34.111.189.158	192.168.2.24
Jan 10, 2025 16:23:21.871965885 CET	59099	443	192.168.2.24	34.111.189.158
Jan 10, 2025 16:23:21.875776052 CET	59099	443	192.168.2.24	34.111.189.158
Jan 10, 2025 16:23:21.875787973 CET	443	59099	34.111.189.158	192.168.2.24
Jan 10, 2025 16:23:21.876264095 CET	59098	443	192.168.2.24	13.32.99.65
Jan 10, 2025 16:23:21.876308918 CET	443	59098	13.32.99.65	192.168.2.24
Jan 10, 2025 16:23:21.880702972 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:21.880733967 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:21.880841017 CET	59093	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:21.880850077 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:21.885737896 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:21.885786057 CET	59093	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:21.892235041 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:21.892529964 CET	443	59095	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:21.892587900 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:21.892744064 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:21.897099018 CET	59094	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:21.937150955 CET	59092	443	192.168.2.24	142.250.186.66
Jan 10, 2025 16:23:21.937206984 CET	443	59092	142.250.186.66	192.168.2.24
Jan 10, 2025 16:23:21.939377069 CET	443	59095	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:21.987524033 CET	59091	443	192.168.2.24	142.250.184.226
Jan 10, 2025 16:23:21.987586021 CET	443	59091	142.250.184.226	192.168.2.24
Jan 10, 2025 16:23:22.001291037 CET	59093	443	192.168.2.24	169.150.255.183
Jan 10, 2025 16:23:22.001312017 CET	443	59093	169.150.255.183	192.168.2.24
Jan 10, 2025 16:23:22.002866030 CET	59100	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.002916098 CET	443	59100	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.002983093 CET	59100	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.003602982 CET	59100	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.003632069 CET	443	59100	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.012223005 CET	443	59095	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:22.012284994 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:22.012314081 CET	443	59095	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:22.012331009 CET	443	59095	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:22.012350082 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:22.012363911 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:22.028636932 CET	59095	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:22.028676033 CET	443	59095	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:22.575912952 CET	443	59099	34.111.189.158	192.168.2.24
Jan 10, 2025 16:23:22.596854925 CET	443	59096	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.605488062 CET	443	59097	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.629259109 CET	59099	443	192.168.2.24	34.111.189.158
Jan 10, 2025 16:23:22.629290104 CET	443	59099	34.111.189.158	192.168.2.24
Jan 10, 2025 16:23:22.629491091 CET	59096	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.629517078 CET	443	59096	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.630069017 CET	443	59096	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.631005049 CET	443	59099	34.111.189.158	192.168.2.24
Jan 10, 2025 16:23:22.631031990 CET	443	59099	34.111.189.158	192.168.2.24
Jan 10, 2025 16:23:22.631068945 CET	59099	443	192.168.2.24	34.111.189.158
Jan 10, 2025 16:23:22.633389950 CET	59097	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.633424997 CET	443	59097	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.633922100 CET	59096	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.634064913 CET	443	59096	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.634361029 CET	443	59097	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.635088921 CET	59099	443	192.168.2.24	34.111.189.158
Jan 10, 2025 16:23:22.635234118 CET	443	59099	34.111.189.158	192.168.2.24
Jan 10, 2025 16:23:22.635646105 CET	59097	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.635755062 CET	443	59097	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.635960102 CET	59096	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.635996103 CET	443	59096	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.636104107 CET	59099	443	192.168.2.24	34.111.189.158
Jan 10, 2025 16:23:22.636126995 CET	443	59099	34.111.189.158	192.168.2.24
Jan 10, 2025 16:23:22.636491060 CET	59097	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.636513948 CET	443	59097	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.717541933 CET	59099	443	192.168.2.24	34.111.189.158
Jan 10, 2025 16:23:22.739793062 CET	443	59099	34.111.189.158	192.168.2.24
Jan 10, 2025 16:23:22.739906073 CET	443	59099	34.111.189.158	192.168.2.24
Jan 10, 2025 16:23:22.740077972 CET	59099	443	192.168.2.24	34.111.189.158
Jan 10, 2025 16:23:22.742938042 CET	59099	443	192.168.2.24	34.111.189.158
Jan 10, 2025 16:23:22.742969036 CET	443	59099	34.111.189.158	192.168.2.24
Jan 10, 2025 16:23:22.783476114 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:22.783524990 CET	443	59101	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:22.783627033 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:22.789891005 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:22.789910078 CET	443	59101	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:22.838041067 CET	443	59096	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.838160992 CET	443	59096	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.838236094 CET	59096	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.838466883 CET	443	59097	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.838571072 CET	443	59097	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.838632107 CET	59097	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.839385033 CET	59096	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.839410067 CET	443	59096	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.840548038 CET	59097	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.840580940 CET	443	59097	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.853669882 CET	443	59100	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.854042053 CET	59100	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.854074955 CET	443	59100	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.855150938 CET	443	59100	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.855211020 CET	59100	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.855555058 CET	59100	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.855628967 CET	443	59100	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:22.855803967 CET	59100	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:22.855812073 CET	443	59100	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:23.016577959 CET	59100	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:23.062473059 CET	443	59100	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:23.062571049 CET	443	59100	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:23.062630892 CET	59100	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:23.063343048 CET	59100	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:23.063369036 CET	443	59100	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:23.087873936 CET	59105	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:23.087918043 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:23.088083029 CET	59105	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:23.090137005 CET	59105	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:23.090157986 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:23.171741962 CET	59106	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.171770096 CET	443	59106	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.172066927 CET	59106	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.172570944 CET	59106	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.172583103 CET	443	59106	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.174015999 CET	59107	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.174063921 CET	443	59107	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.174144030 CET	59107	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.174452066 CET	59107	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.174468040 CET	443	59107	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.195709944 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:23.195774078 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:23.196377993 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:23.196760893 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:23.196779013 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:23.214607954 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:23.214659929 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:23.214725018 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:23.215019941 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:23.215039015 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:23.231734037 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:23.231772900 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:23.231962919 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:23.231975079 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:23.232031107 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:23.232137918 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:23.232208967 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:23.232295036 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:23.232353926 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:23.232594967 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:23.232616901 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:23.232870102 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:23.232887983 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:23.233179092 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:23.233222008 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:23.235457897 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:23.235487938 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:23.235555887 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:23.235878944 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:23.235892057 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:23.257689953 CET	59115	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:23.257730961 CET	443	59115	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:23.257797003 CET	59115	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:23.258156061 CET	59115	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:23.258169889 CET	443	59115	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:23.288191080 CET	443	59101	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:23.290021896 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.302964926 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.303002119 CET	443	59101	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:23.304703951 CET	443	59101	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:23.304781914 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.309640884 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.309773922 CET	443	59101	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:23.309839964 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.309864044 CET	443	59101	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:23.310071945 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.311572075 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.317661047 CET	59116	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:23.317708969 CET	443	59116	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:23.317856073 CET	59116	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:23.319217920 CET	59116	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:23.319232941 CET	443	59116	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:23.327482939 CET	59117	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:23.327537060 CET	443	59117	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:23.328088999 CET	59117	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:23.329776049 CET	59117	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:23.329791069 CET	443	59117	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:23.355375051 CET	443	59101	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:23.375621080 CET	443	59098	13.32.99.65	192.168.2.24
Jan 10, 2025 16:23:23.375652075 CET	443	59098	13.32.99.65	192.168.2.24
Jan 10, 2025 16:23:23.375801086 CET	59098	443	192.168.2.24	13.32.99.65
Jan 10, 2025 16:23:23.376939058 CET	443	59098	13.32.99.65	192.168.2.24
Jan 10, 2025 16:23:23.377017975 CET	59098	443	192.168.2.24	13.32.99.65
Jan 10, 2025 16:23:23.391410112 CET	59098	443	192.168.2.24	13.32.99.65
Jan 10, 2025 16:23:23.391442060 CET	443	59098	13.32.99.65	192.168.2.24
Jan 10, 2025 16:23:23.391803026 CET	59098	443	192.168.2.24	13.32.99.65
Jan 10, 2025 16:23:23.391808987 CET	443	59098	13.32.99.65	192.168.2.24
Jan 10, 2025 16:23:23.392050982 CET	59098	443	192.168.2.24	13.32.99.65
Jan 10, 2025 16:23:23.392055988 CET	443	59098	13.32.99.65	192.168.2.24
Jan 10, 2025 16:23:23.430294991 CET	443	59101	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:23.430407047 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.430409908 CET	443	59101	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:23.430533886 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.484931946 CET	59101	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.484977961 CET	443	59101	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:23.558110952 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.558166981 CET	443	59118	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:23.558227062 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.578248024 CET	443	59098	13.32.99.65	192.168.2.24
Jan 10, 2025 16:23:23.731792927 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:23.731829882 CET	443	59118	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:23.733549118 CET	59098	443	192.168.2.24	13.32.99.65
Jan 10, 2025 16:23:23.733572006 CET	443	59098	13.32.99.65	192.168.2.24
Jan 10, 2025 16:23:23.745858908 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:23.826730013 CET	443	59106	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.836519003 CET	443	59107	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.860783100 CET	59107	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.860804081 CET	443	59107	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.860960007 CET	59106	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.860985041 CET	443	59106	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.861341953 CET	443	59107	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.862529039 CET	443	59106	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.867746115 CET	59105	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:23.867769003 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:23.868263006 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:23.869649887 CET	59107	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.869806051 CET	443	59107	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.870306015 CET	59106	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.870492935 CET	59098	443	192.168.2.24	13.32.99.65
Jan 10, 2025 16:23:23.870522976 CET	443	59098	13.32.99.65	192.168.2.24
Jan 10, 2025 16:23:23.870644093 CET	443	59106	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.871781111 CET	59105	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:23.871861935 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:23.872524023 CET	59107	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.872668982 CET	59106	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.872925043 CET	59105	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:23.915322065 CET	443	59106	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.915335894 CET	443	59107	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.919333935 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:23.992017031 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:23.992043018 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:23.992093086 CET	59105	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:23.992116928 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:23.992135048 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:23.992202997 CET	59105	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:23.992202997 CET	59105	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:23.994149923 CET	443	59106	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.994340897 CET	443	59106	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.994390011 CET	59106	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.995321035 CET	59106	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:23.995335102 CET	443	59106	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:23.997226000 CET	59105	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:23.997255087 CET	443	59105	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:24.020292997 CET	443	59107	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.020378113 CET	443	59107	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.020428896 CET	59107	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:24.025955915 CET	59107	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:24.025980949 CET	443	59107	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.028568983 CET	59119	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:24.028603077 CET	443	59119	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.028664112 CET	59119	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:24.029746056 CET	59119	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:24.029761076 CET	443	59119	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.030411959 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.031069040 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.031097889 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.032351971 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.032409906 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.033198118 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.033268929 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.033516884 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.033533096 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.055588961 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.063932896 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.065982103 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.072227955 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.072254896 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.072644949 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.072655916 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.073247910 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.073273897 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.073374987 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.073431015 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.074361086 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.074424028 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.074454069 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.074489117 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.075114965 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.075213909 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.076215029 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.076225996 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.076472044 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.076554060 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.077871084 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.077970028 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.078973055 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.078999043 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.079586029 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.079596996 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.104175091 CET	443	59115	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.104564905 CET	59115	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.104597092 CET	443	59115	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.105889082 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.105938911 CET	443	59115	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.106000900 CET	59115	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.106012106 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.107108116 CET	59115	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.107183933 CET	443	59115	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.107719898 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.107736111 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.107976913 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.107997894 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.108455896 CET	59115	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.108474016 CET	443	59115	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.108831882 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.108894110 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.109554052 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.109608889 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.109646082 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.109715939 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.110316992 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.110405922 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.110580921 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.110589027 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.110778093 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.110793114 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.155786991 CET	443	59116	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.159745932 CET	443	59117	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.160021067 CET	59116	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.160027981 CET	59117	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.160039902 CET	443	59116	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.160059929 CET	443	59117	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.161076069 CET	443	59117	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.161084890 CET	443	59116	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.161139965 CET	59117	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.161258936 CET	59116	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.164114952 CET	59116	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.164211035 CET	443	59116	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.165105104 CET	59117	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.165234089 CET	443	59117	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.165437937 CET	59116	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.165471077 CET	443	59116	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.167670965 CET	59117	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.167686939 CET	443	59117	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.204536915 CET	443	59118	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.204610109 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.207237005 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.207252979 CET	443	59118	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.207921982 CET	443	59118	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.207977057 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.210158110 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.210272074 CET	443	59118	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.210294008 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.210314989 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.223927021 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.223946095 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.223954916 CET	59115	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.223963022 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.223963022 CET	59117	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.255335093 CET	443	59118	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.283339977 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.283390999 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.287333965 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.287384033 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.303989887 CET	59116	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.303991079 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.329683065 CET	443	59118	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.329741001 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.329766035 CET	443	59118	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.329798937 CET	443	59118	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.329804897 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.329833984 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.332047939 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.332072973 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.332117081 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.332129955 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.332144976 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.332169056 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.332185984 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.333647966 CET	59118	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.333662987 CET	443	59118	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.340142965 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.340172052 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.340219021 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.340246916 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.340264082 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.340285063 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.340303898 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.342909098 CET	59108	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.342927933 CET	443	59108	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.346925020 CET	59109	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.346946955 CET	443	59109	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.352432966 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.352485895 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.352519035 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.352544069 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.352581024 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.352581024 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.352597952 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.353156090 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.353193045 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.354414940 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.354461908 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.354491949 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.354511023 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.354518890 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.354532957 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.354549885 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.354979992 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.355016947 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.378624916 CET	59111	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.378659964 CET	443	59111	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.379380941 CET	59110	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.379417896 CET	443	59110	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.389421940 CET	443	59115	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.389653921 CET	443	59115	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.389704943 CET	59115	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.390005112 CET	59115	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.390024900 CET	443	59115	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.392276049 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.392299891 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.392318964 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.392324924 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.392347097 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.392370939 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.392400026 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.393722057 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.393785000 CET	443	59113	207.211.211.26	192.168.2.24
Jan 10, 2025 16:23:24.393829107 CET	59113	443	192.168.2.24	207.211.211.26
Jan 10, 2025 16:23:24.405107021 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.405260086 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.405325890 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.405352116 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.405441046 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.405486107 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.405493021 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.405791998 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.405837059 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.407520056 CET	59112	443	192.168.2.24	142.250.181.226
Jan 10, 2025 16:23:24.407540083 CET	443	59112	142.250.181.226	192.168.2.24
Jan 10, 2025 16:23:24.419749975 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.419781923 CET	443	59121	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.419843912 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.421911955 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.421920061 CET	443	59121	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.437410116 CET	443	59116	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.437494040 CET	443	59116	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.437561989 CET	59116	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.438467979 CET	59116	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.438503981 CET	443	59116	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.442104101 CET	443	59117	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.442219019 CET	443	59117	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.442264080 CET	59117	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.445373058 CET	59117	443	192.168.2.24	142.250.186.164
Jan 10, 2025 16:23:24.445396900 CET	443	59117	142.250.186.164	192.168.2.24
Jan 10, 2025 16:23:24.709816933 CET	443	59119	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.710820913 CET	443	58995	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:24.710881948 CET	443	58995	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:24.710938931 CET	58995	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:24.717756033 CET	59119	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:24.717777967 CET	443	59119	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.718240976 CET	443	59119	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.718919992 CET	59119	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:24.718990088 CET	443	59119	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.719409943 CET	59119	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:24.733899117 CET	443	59000	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:24.733975887 CET	443	59000	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:24.734030008 CET	59000	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:24.739872932 CET	443	58998	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:24.739939928 CET	443	58998	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:24.739975929 CET	58998	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:24.744067907 CET	443	58997	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:24.744149923 CET	443	58997	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:24.744189978 CET	58997	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:24.746916056 CET	443	58996	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:24.746982098 CET	443	58996	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:24.747018099 CET	58996	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:24.767324924 CET	443	59119	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.791528940 CET	443	59001	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:24.791621923 CET	443	59001	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:24.791659117 CET	59001	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:24.865411043 CET	443	59119	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.865506887 CET	443	59119	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.865555048 CET	59119	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:24.869901896 CET	59119	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:24.869916916 CET	443	59119	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:24.872637033 CET	443	59121	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.872689962 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.881921053 CET	59125	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:24.881974936 CET	443	59125	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:24.882090092 CET	59125	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:24.886940956 CET	59125	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:24.886965036 CET	443	59125	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:24.889128923 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.889132977 CET	443	59121	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.890243053 CET	443	59121	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.890305042 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.901163101 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.901400089 CET	443	59121	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:24.901443958 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.901705027 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:24.947323084 CET	443	59121	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.019871950 CET	443	59121	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.019922018 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.019928932 CET	443	59121	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.019956112 CET	443	59121	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.019980907 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.020004988 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.060081005 CET	59121	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.060103893 CET	443	59121	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.173429012 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.173475027 CET	443	59126	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.173541069 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.181528091 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.181538105 CET	443	59126	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.568871021 CET	443	59125	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:25.569173098 CET	59125	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:25.569241047 CET	443	59125	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:25.570379019 CET	443	59125	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:25.570777893 CET	59125	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:25.570875883 CET	443	59125	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:25.570924997 CET	59125	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:25.611345053 CET	443	59125	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:25.637135029 CET	443	59126	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.637206078 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.638811111 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.638823032 CET	443	59126	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.639359951 CET	443	59126	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.639537096 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.641135931 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.641238928 CET	443	59126	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.641279936 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.641396046 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.653450012 CET	59128	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:25.653507948 CET	443	59128	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:25.653637886 CET	59128	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:25.655075073 CET	59128	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:25.655095100 CET	443	59128	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:25.665640116 CET	443	59017	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:25.665723085 CET	443	59017	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:25.665781021 CET	59017	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:25.672288895 CET	443	59015	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:25.672379017 CET	443	59015	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:25.672426939 CET	59015	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:25.680529118 CET	443	59016	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:25.680704117 CET	443	59016	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:25.680774927 CET	59016	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:25.687335968 CET	443	59126	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.699922085 CET	443	59125	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:25.700025082 CET	59125	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:25.702528954 CET	59125	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:25.702557087 CET	443	59125	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:25.746382952 CET	59129	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:25.746495008 CET	443	59129	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:25.747555017 CET	59129	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:25.748126984 CET	59129	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:25.748164892 CET	443	59129	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:25.872658968 CET	443	59126	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.872783899 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.872808933 CET	443	59126	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.872862101 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.872922897 CET	443	59126	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.872967958 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.874094963 CET	59126	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:25.874110937 CET	443	59126	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:25.932568073 CET	59000	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:25.932595015 CET	443	59000	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:25.932787895 CET	59001	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:25.932818890 CET	443	59001	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:25.932938099 CET	58998	443	192.168.2.24	2.23.227.213
Jan 10, 2025 16:23:25.932957888 CET	443	58998	2.23.227.213	192.168.2.24
Jan 10, 2025 16:23:25.932966948 CET	58995	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:25.932992935 CET	443	58995	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:25.932993889 CET	58997	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:25.933017015 CET	443	58997	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:25.933140039 CET	59017	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:25.933151007 CET	443	59017	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:25.933163881 CET	58996	443	192.168.2.24	104.124.11.163
Jan 10, 2025 16:23:25.933171034 CET	443	58996	104.124.11.163	192.168.2.24
Jan 10, 2025 16:23:25.933423996 CET	59016	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:25.933435917 CET	443	59016	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:25.933628082 CET	59015	443	192.168.2.24	96.17.65.185
Jan 10, 2025 16:23:25.933635950 CET	443	59015	96.17.65.185	192.168.2.24
Jan 10, 2025 16:23:26.081808090 CET	59130	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:26.081866026 CET	443	59130	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:26.081923962 CET	59130	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:26.082247972 CET	59130	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:26.082264900 CET	443	59130	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:26.309665918 CET	443	59128	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:26.429475069 CET	59128	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:26.429481983 CET	443	59128	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:26.430748940 CET	443	59128	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:26.432471037 CET	59128	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:26.432550907 CET	443	59128	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:26.432986975 CET	59128	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:26.475378036 CET	443	59128	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:26.549164057 CET	443	59128	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:26.549190998 CET	443	59128	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:26.549254894 CET	59128	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:26.549268007 CET	443	59128	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:26.549310923 CET	59128	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:26.558588028 CET	443	59130	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:26.559822083 CET	59128	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:26.559851885 CET	443	59128	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:26.562391996 CET	59130	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:26.562422991 CET	443	59130	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:26.563498020 CET	443	59130	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:26.563560963 CET	59130	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:26.568527937 CET	59130	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:26.568679094 CET	443	59130	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:26.568806887 CET	59130	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:26.568821907 CET	443	59130	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:26.633570910 CET	59130	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:26.727411985 CET	443	59130	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:26.727513075 CET	443	59130	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:26.727569103 CET	59130	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:26.751086950 CET	59130	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:26.751149893 CET	443	59130	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:28.020173073 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:28.020220041 CET	443	59131	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:28.021806002 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:28.024331093 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:28.024348974 CET	443	59131	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:28.508388996 CET	443	59131	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:28.508555889 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:28.775825977 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:28.775860071 CET	443	59131	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:28.776550055 CET	443	59131	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:28.776627064 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:28.777683973 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:28.777837992 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:28.777880907 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:28.778008938 CET	443	59131	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:28.778095007 CET	443	59131	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:28.778141022 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:29.230577946 CET	443	59131	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:29.230671883 CET	443	59131	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:29.230690956 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:29.230720043 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:29.657028913 CET	443	59129	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:29.814565897 CET	59129	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:29.962816954 CET	59131	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:29.962850094 CET	443	59131	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:29.967336893 CET	59129	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:29.967369080 CET	443	59129	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:29.967915058 CET	443	59129	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:29.968959093 CET	59132	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:29.969053984 CET	443	59132	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:29.969131947 CET	59132	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:29.972579956 CET	59129	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:29.972685099 CET	443	59129	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:29.977592945 CET	59132	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:29.977628946 CET	443	59132	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:29.983129025 CET	59129	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:30.023377895 CET	443	59129	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:30.109548092 CET	443	59129	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:30.109644890 CET	443	59129	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:30.109714031 CET	59129	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:30.113776922 CET	59129	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:30.113806963 CET	443	59129	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:30.631385088 CET	443	59132	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:30.632237911 CET	59132	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:30.632272005 CET	443	59132	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:30.632867098 CET	443	59132	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:30.633822918 CET	59132	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:30.633932114 CET	443	59132	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:30.634062052 CET	59132	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:30.679335117 CET	443	59132	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:30.766469002 CET	443	59132	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:30.766545057 CET	59132	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:30.767112017 CET	59132	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:30.767137051 CET	443	59132	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:30.772010088 CET	59133	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:30.772058010 CET	443	59133	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:30.772165060 CET	59133	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:30.772753954 CET	59133	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:30.772768021 CET	443	59133	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:31.440507889 CET	443	59133	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:31.440804005 CET	59133	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:31.440824032 CET	443	59133	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:31.441410065 CET	443	59133	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:31.441766977 CET	59133	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:31.441838980 CET	443	59133	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:31.441927910 CET	59133	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:31.487333059 CET	443	59133	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:31.569648027 CET	443	59133	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:31.569853067 CET	443	59133	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:31.570027113 CET	59133	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:31.572122097 CET	59133	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:31.572143078 CET	443	59133	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:31.604542017 CET	443	59094	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:31.604659081 CET	443	59094	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:31.604707956 CET	59094	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:31.702770948 CET	59134	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:31.702821970 CET	443	59134	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:31.702884912 CET	59134	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:31.704401970 CET	59134	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:31.704415083 CET	443	59134	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:31.714629889 CET	59094	443	192.168.2.24	142.250.185.228
Jan 10, 2025 16:23:31.714672089 CET	443	59094	142.250.185.228	192.168.2.24
Jan 10, 2025 16:23:31.972718000 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:31.972769022 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:31.972965002 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:32.135359049 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:32.135387897 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:32.205862999 CET	443	59134	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.205931902 CET	59134	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.218530893 CET	59134	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.218544960 CET	443	59134	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.218996048 CET	443	59134	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.219089031 CET	59134	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.221101046 CET	59134	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.221182108 CET	443	59134	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.221226931 CET	59134	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.221302032 CET	59134	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.228874922 CET	59136	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.228926897 CET	443	59136	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.229027033 CET	59136	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.263328075 CET	443	59134	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.343616009 CET	443	59134	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.343693018 CET	443	59134	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.343753099 CET	59134	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.472534895 CET	59136	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.472577095 CET	443	59136	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.515086889 CET	59134	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.515115976 CET	443	59134	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.591730118 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.591782093 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.591847897 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.593413115 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.593425035 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.878606081 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:32.878669024 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:32.880207062 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:32.880217075 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:32.881803036 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:32.881875038 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:32.887953043 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:32.888088942 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:32.888143063 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:32.888149023 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:32.888190031 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:32.927165985 CET	443	59136	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.979394913 CET	59136	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.979429960 CET	443	59136	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.981129885 CET	443	59136	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.981152058 CET	443	59136	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.981476068 CET	59136	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.987010002 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:32.993422031 CET	59136	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.993808031 CET	443	59136	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:32.996320963 CET	59136	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:32.996334076 CET	443	59136	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.027333975 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:33.059917927 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.059973001 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.063215017 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.063225985 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.064213037 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.064260960 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.065438986 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.065510988 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.065560102 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.065567017 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.065607071 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.067197084 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.107368946 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.108547926 CET	59136	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.119626045 CET	443	59136	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.119829893 CET	443	59136	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.119882107 CET	59136	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.120131969 CET	59136	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.120157003 CET	443	59136	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.461391926 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:33.461483002 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:33.461512089 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:33.461544037 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:33.461564064 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:33.461596966 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:33.465006113 CET	59135	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:33.465022087 CET	443	59135	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:33.494394064 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.494422913 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.494457960 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.494488955 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.494508028 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.494509935 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.494534016 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.494568110 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.497617960 CET	59137	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.497647047 CET	443	59137	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.685151100 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:33.685215950 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:33.685337067 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:33.686403990 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:33.686418056 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:33.704418898 CET	59139	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.704466105 CET	443	59139	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.707202911 CET	59139	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.707401991 CET	59139	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:33.707452059 CET	443	59139	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:33.707530022 CET	59139	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:34.133582115 CET	59141	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:34.133616924 CET	443	59141	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:34.133678913 CET	59141	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:34.134474039 CET	59141	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:34.134488106 CET	443	59141	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:34.329977989 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:34.330073118 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:34.374200106 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:34.374260902 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:34.374881029 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:34.374943018 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:34.389450073 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:34.389588118 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:34.389648914 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:34.389914989 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:34.431344032 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:34.604060888 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:34.604129076 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:34.604202032 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:34.604249954 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:34.604262114 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:34.604300022 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:34.604367971 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:34.604409933 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:34.605607986 CET	443	59141	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:34.621531963 CET	59141	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:34.621557951 CET	443	59141	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:34.622773886 CET	443	59141	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:34.625298023 CET	59141	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:34.625518084 CET	443	59141	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:34.625713110 CET	59141	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:34.660288095 CET	59138	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:34.660317898 CET	443	59138	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:34.671327114 CET	443	59141	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:34.756320953 CET	443	59141	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:34.756515980 CET	443	59141	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:34.756587982 CET	59141	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:35.062167883 CET	59143	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:35.062262058 CET	443	59143	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:35.062338114 CET	59143	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:35.081747055 CET	59143	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:35.081816912 CET	443	59143	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:35.100830078 CET	59141	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:35.100861073 CET	443	59141	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:35.569351912 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:35.569467068 CET	443	59144	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:35.569575071 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:35.571075916 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:35.571109056 CET	443	59144	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:35.745526075 CET	443	59143	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:35.745800018 CET	59143	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:35.745826960 CET	443	59143	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:35.746129036 CET	443	59143	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:35.746407986 CET	59143	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:35.746457100 CET	443	59143	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:35.747143030 CET	59143	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:35.787329912 CET	443	59143	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:35.878309011 CET	443	59143	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:35.878407001 CET	443	59143	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:35.878453016 CET	59143	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:35.899626970 CET	59143	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:35.899656057 CET	443	59143	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:35.917989016 CET	59147	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:35.918025017 CET	443	59147	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:35.918107986 CET	59147	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:35.918483019 CET	59147	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:35.918498039 CET	443	59147	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:36.202394009 CET	59151	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:36.202435970 CET	443	59151	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:36.202492952 CET	59151	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:36.219907999 CET	59151	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:36.219937086 CET	443	59151	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:36.322072983 CET	443	59144	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:36.322308064 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.370711088 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.370758057 CET	443	59144	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:36.371299982 CET	443	59144	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:36.371365070 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.379194021 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.379311085 CET	443	59144	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:36.379369974 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.379622936 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.427336931 CET	443	59144	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:36.507242918 CET	443	59023	108.139.47.92	192.168.2.24
Jan 10, 2025 16:23:36.507443905 CET	443	59023	108.139.47.92	192.168.2.24
Jan 10, 2025 16:23:36.507502079 CET	59023	443	192.168.2.24	108.139.47.92
Jan 10, 2025 16:23:36.577359915 CET	443	59147	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:36.579794884 CET	59147	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:36.579823017 CET	443	59147	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:36.580180883 CET	443	59147	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:36.580853939 CET	59147	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:36.580931902 CET	443	59147	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:36.581104040 CET	59147	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:36.598381042 CET	443	59144	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:36.598469973 CET	443	59144	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:36.598476887 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.598548889 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.605829954 CET	59144	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.605902910 CET	443	59144	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:36.627330065 CET	443	59147	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:36.674523115 CET	443	59151	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:36.705635071 CET	443	59147	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:36.705709934 CET	443	59147	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:36.705754042 CET	59147	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:36.720841885 CET	59147	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:36.720864058 CET	443	59147	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:36.797493935 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.797506094 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:36.797561884 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.798451900 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:36.798464060 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:36.806592941 CET	59151	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:37.553374052 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:37.553456068 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:37.736237049 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:37.736284971 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:37.737801075 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:37.737857103 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:37.741735935 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:37.741965055 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:37.742010117 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:37.742067099 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:37.787343979 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:37.932012081 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:37.932065964 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:37.932168961 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:37.932219982 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:37.932231903 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:37.932271957 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:37.932332039 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:37.932374954 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:37.933096886 CET	59155	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:37.933135986 CET	443	59155	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:38.101188898 CET	59157	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:38.101231098 CET	443	59157	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:38.101303101 CET	59157	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:38.102396011 CET	59157	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:38.102415085 CET	443	59157	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:38.105863094 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:38.105906963 CET	443	59158	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:38.105973959 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:38.106806040 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:38.106831074 CET	443	59158	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:38.862066984 CET	443	59158	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:38.862257004 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:38.871069908 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:38.871098042 CET	443	59158	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:38.871556044 CET	443	59158	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:38.871604919 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:38.872509956 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:38.872585058 CET	443	59158	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:38.872760057 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:38.872785091 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:38.892010927 CET	443	59157	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:38.892093897 CET	59157	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:38.896405935 CET	59157	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:38.896419048 CET	443	59157	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:38.896842957 CET	443	59157	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:38.905466080 CET	59157	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:38.905534983 CET	59157	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:38.905544996 CET	443	59157	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:38.905666113 CET	59157	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:38.919332027 CET	443	59158	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:38.951339006 CET	443	59157	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:39.080640078 CET	443	59157	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:39.080758095 CET	443	59157	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:39.080816984 CET	59157	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:39.080946922 CET	59157	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:23:39.080966949 CET	443	59157	40.113.103.199	192.168.2.24
Jan 10, 2025 16:23:39.167424917 CET	443	59158	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:39.167493105 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:39.167531967 CET	443	59158	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:39.167551041 CET	443	59158	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:39.167593956 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:39.168112993 CET	59158	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:39.168135881 CET	443	59158	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:39.424803972 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:39.424854040 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:39.425009966 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:39.425988913 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:39.425997972 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:39.884928942 CET	59162	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:39.884980917 CET	443	59162	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:39.885111094 CET	59162	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:39.885565042 CET	59162	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:39.885584116 CET	443	59162	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:40.140316010 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.142508030 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.262656927 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.262685061 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.263264894 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.263304949 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.273828030 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.273915052 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.273953915 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.274185896 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.319335938 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.456346989 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.456398964 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.456425905 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.456460953 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.456465006 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.456495047 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.456526041 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.456558943 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.457467079 CET	59160	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.457479000 CET	443	59160	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.482805014 CET	59163	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.482841015 CET	443	59163	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.482901096 CET	59163	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.483166933 CET	59164	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.483247995 CET	443	59164	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.483408928 CET	59164	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.483784914 CET	59165	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.483880043 CET	443	59165	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.483988047 CET	59163	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.483998060 CET	443	59163	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.484011889 CET	59165	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.484424114 CET	59164	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.484464884 CET	443	59164	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.484627008 CET	59165	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.484659910 CET	443	59165	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.569564104 CET	443	59162	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:40.571902990 CET	59162	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:40.571933985 CET	443	59162	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:40.572427034 CET	443	59162	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:40.595191002 CET	59162	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:40.595407963 CET	443	59162	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:40.595801115 CET	59162	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:40.639375925 CET	443	59162	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:40.753367901 CET	443	59162	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:40.753465891 CET	443	59162	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:40.753534079 CET	59162	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:40.766911983 CET	59162	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:40.766957998 CET	443	59162	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:40.792700052 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.792742968 CET	443	59166	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.792809010 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.793778896 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:40.793797016 CET	443	59166	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:40.799401045 CET	59167	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:40.799495935 CET	443	59167	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:40.799573898 CET	59167	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:40.799870014 CET	59167	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:40.799901962 CET	443	59167	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:40.937531948 CET	443	59165	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.937855005 CET	59165	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.937880039 CET	443	59165	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.938929081 CET	443	59165	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.938982964 CET	59165	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.942050934 CET	59165	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.942150116 CET	443	59165	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.942390919 CET	59165	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.942403078 CET	443	59165	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.958884954 CET	443	59163	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.959403992 CET	59163	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.959415913 CET	443	59163	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.960496902 CET	443	59163	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.960561991 CET	59163	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.962776899 CET	59163	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.962833881 CET	443	59163	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.963124037 CET	59163	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.963129044 CET	443	59163	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.967354059 CET	443	59164	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.967840910 CET	59164	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.967868090 CET	443	59164	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.969293118 CET	443	59164	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:40.969351053 CET	59164	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.971627951 CET	59164	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.971823931 CET	59164	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:40.972209930 CET	443	59164	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:41.017607927 CET	59165	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:41.017673016 CET	59163	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:41.033593893 CET	59164	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:41.033618927 CET	443	59164	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:41.071422100 CET	443	59165	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:41.071501970 CET	443	59165	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:41.071553946 CET	59165	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:41.071928024 CET	59165	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:41.071948051 CET	443	59165	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:41.108694077 CET	443	59163	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:41.108819008 CET	443	59163	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:41.108865023 CET	59163	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:41.108936071 CET	443	59164	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:41.109009027 CET	59164	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:41.120203018 CET	59163	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:41.120235920 CET	443	59163	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:41.120651007 CET	59164	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:41.120707989 CET	443	59164	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:41.482414007 CET	443	59167	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:41.482695103 CET	59167	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:41.482717991 CET	443	59167	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:41.483068943 CET	443	59167	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:41.483362913 CET	59167	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:41.483426094 CET	443	59167	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:41.483532906 CET	59167	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:41.527329922 CET	443	59167	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:41.542861938 CET	443	59166	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:41.542931080 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:41.545675993 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:41.545689106 CET	443	59166	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:41.546047926 CET	443	59166	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:41.546097040 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:41.546808958 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:41.546869040 CET	443	59166	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:41.546905041 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:41.547082901 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:41.587337971 CET	443	59166	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:41.617108107 CET	443	59167	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:41.617208004 CET	443	59167	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:41.617613077 CET	59167	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:41.617892981 CET	59167	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:41.617935896 CET	443	59167	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:41.820606947 CET	443	59166	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:41.820676088 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:41.820717096 CET	443	59166	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:41.820739031 CET	443	59166	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:41.820785046 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:41.821475983 CET	59166	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:41.821494102 CET	443	59166	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:42.024040937 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:42.024163961 CET	443	59171	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:42.024274111 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:42.025415897 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:42.025454044 CET	443	59171	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:42.190274000 CET	59151	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:42.190321922 CET	443	59151	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:42.190999985 CET	443	59151	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:42.191941023 CET	59151	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:42.192079067 CET	443	59151	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:42.192780018 CET	59151	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:42.200208902 CET	59172	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:42.200267076 CET	443	59172	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:42.200344086 CET	59172	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:42.201669931 CET	59172	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:42.201706886 CET	443	59172	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:42.235367060 CET	443	59151	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:42.405086040 CET	443	59151	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:42.405215979 CET	443	59151	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:42.405261993 CET	59151	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:42.680846930 CET	443	59172	167.99.235.203	192.168.2.24
Jan 10, 2025 16:23:42.722573042 CET	59172	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:42.746293068 CET	443	59171	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:42.746361971 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:42.816303968 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:42.816334963 CET	443	59171	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:42.816939116 CET	443	59171	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:42.817001104 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:42.833246946 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:42.833405018 CET	443	59171	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:42.833461046 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:42.836738110 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:42.879340887 CET	443	59171	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:43.019836903 CET	443	59171	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:43.019905090 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:43.019933939 CET	443	59171	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:43.019975901 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:43.020658970 CET	59171	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:43.020688057 CET	443	59171	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:43.557961941 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:43.558022976 CET	443	59174	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:43.558089018 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:43.559070110 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:43.559089899 CET	443	59174	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:43.739092112 CET	59151	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:43.742005110 CET	59172	443	192.168.2.24	167.99.235.203
Jan 10, 2025 16:23:44.300478935 CET	443	59174	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:44.300554991 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.303874016 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.303889990 CET	443	59174	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:44.304414034 CET	443	59174	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:44.304466963 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.305392981 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.305476904 CET	443	59174	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:44.305584908 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.305609941 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.347333908 CET	443	59174	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:44.573934078 CET	443	59174	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:44.574032068 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.574039936 CET	443	59174	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:44.574152946 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.574711084 CET	59174	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.574729919 CET	443	59174	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:44.799691916 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.799735069 CET	443	59175	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:44.799834967 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.800863028 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:44.800874949 CET	443	59175	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:44.886090040 CET	59176	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:44.886143923 CET	443	59176	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:44.886228085 CET	59176	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:44.886617899 CET	59176	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:44.886632919 CET	443	59176	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:45.554198027 CET	443	59176	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:45.554492950 CET	59176	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:45.554532051 CET	443	59176	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:45.555233955 CET	443	59176	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:45.555627108 CET	59176	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:45.555721045 CET	443	59176	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:45.555794001 CET	59176	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:45.576296091 CET	443	59175	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:45.576409101 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:45.579293013 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:45.579309940 CET	443	59175	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:45.579709053 CET	443	59175	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:45.580054998 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:45.580748081 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:45.580966949 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:45.580979109 CET	443	59175	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:45.580998898 CET	443	59175	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:45.581115961 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:45.603333950 CET	443	59176	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:45.693036079 CET	443	59176	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:45.693234921 CET	443	59176	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:45.693478107 CET	59176	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:45.695091963 CET	59176	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:45.695113897 CET	443	59176	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:45.698596954 CET	59177	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:45.698640108 CET	443	59177	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:45.698724985 CET	59177	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:45.699044943 CET	59177	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:45.699059010 CET	443	59177	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:45.863164902 CET	443	59175	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:45.863229036 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:45.863240957 CET	443	59175	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:45.863292933 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:45.863292933 CET	443	59175	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:45.863332033 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:45.866735935 CET	59175	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:45.866754055 CET	443	59175	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:46.241806030 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:46.241877079 CET	443	59179	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:46.242167950 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:46.243071079 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:46.243093014 CET	443	59179	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:46.355930090 CET	443	59177	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:46.356215000 CET	59177	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:46.356251955 CET	443	59177	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:46.356559992 CET	443	59177	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:46.356961012 CET	59177	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:46.357023954 CET	443	59177	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:46.357106924 CET	59177	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:46.399333954 CET	443	59177	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:46.487652063 CET	443	59177	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:46.487745047 CET	443	59177	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:46.487919092 CET	59177	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:46.488279104 CET	59177	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:46.488295078 CET	443	59177	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:46.964514017 CET	443	59179	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:46.964648962 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:46.967278957 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:46.967288017 CET	443	59179	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:46.967657089 CET	443	59179	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:46.967801094 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:46.969413042 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:46.969485998 CET	443	59179	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:46.969615936 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:47.011331081 CET	443	59179	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:47.242172956 CET	443	59179	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:47.242258072 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:47.242288113 CET	443	59179	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:47.242306948 CET	443	59179	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:47.242337942 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:47.242376089 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:47.243273973 CET	59179	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:47.243288040 CET	443	59179	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:47.454569101 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:47.454608917 CET	443	59180	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:47.454710007 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:47.455785036 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:47.455802917 CET	443	59180	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:48.205287933 CET	443	59180	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:48.205378056 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.217186928 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.217200041 CET	443	59180	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:48.217688084 CET	443	59180	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:48.217751980 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.220999002 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.221132040 CET	443	59180	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:48.221195936 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.221441984 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.263331890 CET	443	59180	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:48.485960960 CET	443	59180	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:48.486033916 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.486052036 CET	443	59180	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:48.486068964 CET	443	59180	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:48.486135960 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.487468004 CET	59180	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.487484932 CET	443	59180	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:48.701416969 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.701522112 CET	443	59181	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:48.701621056 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.703214884 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:48.703259945 CET	443	59181	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:49.500813007 CET	443	59181	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:49.500889063 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:49.503468990 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:49.503479958 CET	443	59181	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:49.504040003 CET	443	59181	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:49.504098892 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:49.506078005 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:49.506190062 CET	443	59181	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:49.506263971 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:49.506309032 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:49.547352076 CET	443	59181	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:49.773818970 CET	443	59181	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:49.773880005 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:49.773902893 CET	443	59181	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:49.773942947 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:49.774167061 CET	443	59181	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:49.774209023 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:49.785079956 CET	59181	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:49.785105944 CET	443	59181	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:49.878981113 CET	59182	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:49.879045010 CET	443	59182	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:49.879201889 CET	59182	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:49.879472971 CET	59182	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:49.879488945 CET	443	59182	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:50.499778032 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:50.499861956 CET	443	59183	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:50.499938965 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:50.501221895 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:50.501251936 CET	443	59183	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:50.563009977 CET	443	59182	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:50.563340902 CET	59182	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:50.563376904 CET	443	59182	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:50.563736916 CET	443	59182	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:50.564265966 CET	59182	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:50.564342022 CET	443	59182	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:50.564462900 CET	59182	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:50.607340097 CET	443	59182	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:50.888559103 CET	443	59182	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:50.888648987 CET	443	59182	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:50.888698101 CET	59182	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:50.890016079 CET	59182	443	192.168.2.24	159.203.177.96
Jan 10, 2025 16:23:50.890042067 CET	443	59182	159.203.177.96	192.168.2.24
Jan 10, 2025 16:23:50.894256115 CET	59184	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:50.894298077 CET	443	59184	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:50.894494057 CET	59184	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:50.894825935 CET	59184	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:50.894848108 CET	443	59184	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:51.263359070 CET	443	59183	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:51.263425112 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.266494036 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.266515970 CET	443	59183	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:51.267025948 CET	443	59183	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:51.267086029 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.268011093 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.268114090 CET	443	59183	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:51.268163919 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.268265009 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.311340094 CET	443	59183	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:51.536262989 CET	443	59183	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:51.536338091 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.536360979 CET	443	59183	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:51.536408901 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.545531034 CET	59183	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.545562983 CET	443	59183	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:51.554905891 CET	443	59184	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:51.555293083 CET	59184	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:51.555329084 CET	443	59184	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:51.555685043 CET	443	59184	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:51.556253910 CET	59184	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:51.556312084 CET	443	59184	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:51.556454897 CET	59184	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:51.599339008 CET	443	59184	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:51.680277109 CET	443	59184	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:51.680361986 CET	443	59184	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:51.680423975 CET	59184	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:51.681238890 CET	59184	443	192.168.2.24	159.223.126.41
Jan 10, 2025 16:23:51.681261063 CET	443	59184	159.223.126.41	192.168.2.24
Jan 10, 2025 16:23:51.760493040 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.760545969 CET	443	59185	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:51.760621071 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.761634111 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:51.761658907 CET	443	59185	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:51.762625933 CET	59013	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:51.762650967 CET	443	59013	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:51.763247013 CET	59014	443	192.168.2.24	150.171.27.10
Jan 10, 2025 16:23:51.763282061 CET	443	59014	150.171.27.10	192.168.2.24
Jan 10, 2025 16:23:51.857810974 CET	59026	443	192.168.2.24	13.107.21.237
Jan 10, 2025 16:23:51.857844114 CET	443	59026	13.107.21.237	192.168.2.24
Jan 10, 2025 16:23:51.873827934 CET	59025	443	192.168.2.24	20.110.205.119
Jan 10, 2025 16:23:51.873858929 CET	443	59025	20.110.205.119	192.168.2.24
Jan 10, 2025 16:23:52.490447044 CET	443	59185	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:52.490526915 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:52.493371964 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:52.493382931 CET	443	59185	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:52.493845940 CET	443	59185	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:52.493905067 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:52.494805098 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:52.494885921 CET	443	59185	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:52.494950056 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:52.495059967 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:52.535337925 CET	443	59185	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:52.764839888 CET	443	59185	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:52.764945030 CET	443	59185	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:52.765079975 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:52.765079975 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:52.823182106 CET	59185	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:52.823227882 CET	443	59185	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:53.582518101 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:53.582576036 CET	443	59186	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:53.582792044 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:53.584371090 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:53.584388018 CET	443	59186	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:54.302577972 CET	443	59186	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:54.302829027 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.306173086 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.306197882 CET	443	59186	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:54.306648970 CET	443	59186	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:54.306910038 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.307796955 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.307877064 CET	443	59186	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:54.307979107 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.308011055 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.351341963 CET	443	59186	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:54.574887991 CET	443	59186	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:54.574974060 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.574995995 CET	443	59186	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:54.575012922 CET	443	59186	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:54.575054884 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.575957060 CET	59186	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.575973988 CET	443	59186	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:54.769515038 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.769571066 CET	443	59187	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:54.769710064 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.770845890 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:54.770864010 CET	443	59187	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:55.497958899 CET	443	59187	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:55.498022079 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:55.500231981 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:55.500245094 CET	443	59187	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:55.500694990 CET	443	59187	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:55.500747919 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:55.501945019 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:55.502063990 CET	443	59187	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:55.502123117 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:55.502279997 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:55.543329000 CET	443	59187	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:55.770706892 CET	443	59187	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:55.770778894 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:55.770806074 CET	443	59187	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:55.770822048 CET	443	59187	18.173.205.91	192.168.2.24
Jan 10, 2025 16:23:55.770847082 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:23:55.770868063 CET	59187	443	192.168.2.24	18.173.205.91
Jan 10, 2025 16:24:00.236768961 CET	59188	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:24:00.236819029 CET	443	59188	40.113.103.199	192.168.2.24
Jan 10, 2025 16:24:00.236944914 CET	59188	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:24:00.237807989 CET	59188	443	192.168.2.24	40.113.103.199
Jan 10, 2025 16:24:00.237828016 CET	443	59188	40.113.103.199	192.168.2.24

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 16:21:50.418462992 CET	51580	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:21:50.425858021 CET	53	51580	1.1.1.1	192.168.2.24
Jan 10, 2025 16:22:50.951107025 CET	53	51580	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:01.558079958 CET	53	51580	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:05.529978037 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:05.997569084 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:05.997634888 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:05.997668982 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:05.998177052 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.007369041 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.007451057 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.007803917 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.007870913 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.007930994 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.007991076 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.008069038 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.008117914 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.106867075 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.106885910 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.106899023 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.106911898 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.107299089 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.107343912 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.111249924 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.111824989 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.112035990 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.112766981 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.112798929 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.113114119 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.113226891 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.113307953 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.113323927 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.113396883 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.114054918 CET	64369	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:06.118711948 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.119138002 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.119539022 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.206546068 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.220470905 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.222398996 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.222436905 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.222664118 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.222887039 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:06.223695040 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:06.227209091 CET	61875	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.507711887 CET	64369	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:08.619081020 CET	61875	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.116539001 CET	64369	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:10.262358904 CET	61875	443	192.168.2.24	184.28.190.83
Jan 10, 2025 16:23:16.713818073 CET	52057	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:16.714258909 CET	49376	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:16.719115973 CET	53	54347	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:16.721105099 CET	53	52057	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:16.721652985 CET	53	56234	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:16.723392010 CET	53	49376	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:16.838347912 CET	51580	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:16.849515915 CET	53	51580	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:18.080059052 CET	53	55297	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:18.468998909 CET	53	63153	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:18.514014006 CET	53	52085	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:19.325028896 CET	60253	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:19.325263023 CET	61518	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:19.335737944 CET	53	61518	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:19.337958097 CET	53	60253	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:19.343394995 CET	62828	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:19.343538046 CET	61853	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:19.350825071 CET	53	61853	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:19.352720022 CET	53	62828	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.227242947 CET	54767	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.227468967 CET	53891	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.234011889 CET	53	54767	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.234065056 CET	53	53891	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.244972944 CET	55431	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.245110035 CET	52599	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.251823902 CET	53	52599	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.251843929 CET	53	55431	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.261007071 CET	63629	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.261172056 CET	65074	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.268032074 CET	53	65074	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.268558979 CET	53	63629	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.268719912 CET	50181	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.268944979 CET	65049	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.275693893 CET	53	50181	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.275826931 CET	53	65049	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.344654083 CET	53	58242	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.404078007 CET	50456	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.404958010 CET	49849	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.406622887 CET	55057	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.407140970 CET	57462	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.410933018 CET	53	50456	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.412266016 CET	53	49849	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.413093090 CET	53	55057	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.413954973 CET	53	57462	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.845169067 CET	63240	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.845304012 CET	64348	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:20.852148056 CET	53	64348	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:20.852408886 CET	53	63240	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:21.842566967 CET	63678	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:21.843059063 CET	57889	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:21.844153881 CET	52680	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:21.844547033 CET	54834	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:21.849555969 CET	53	63678	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:21.850142956 CET	53	57889	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:21.851118088 CET	53	52680	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:21.852588892 CET	53	54834	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:23.038777113 CET	53	60942	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:23.185529947 CET	56722	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:23.185873985 CET	60519	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:23.194974899 CET	53	60519	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:23.195054054 CET	53	56722	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:23.223088980 CET	64871	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:23.223237991 CET	60404	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:23.231054068 CET	53	64871	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:23.231085062 CET	53	60404	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:23.247601986 CET	61178	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:23.247745037 CET	58905	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:23.254390001 CET	53	61178	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:23.254784107 CET	53	58905	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:25.935285091 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:26.035762072 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:26.038168907 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:26.176347971 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:26.226073980 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:26.475914955 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:26.522975922 CET	443	59340	172.64.41.3	192.168.2.24
Jan 10, 2025 16:23:26.562628984 CET	59340	443	192.168.2.24	172.64.41.3
Jan 10, 2025 16:23:26.753060102 CET	54455	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:27.278316021 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.278417110 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.278451920 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.278486967 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.279359102 CET	54455	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:27.331001043 CET	54455	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:27.331837893 CET	54455	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:27.332078934 CET	54455	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:27.337661982 CET	54455	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:27.434336901 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.446156025 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.446167946 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.446177959 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.446194887 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.446202993 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.450032949 CET	54455	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:27.450340033 CET	54455	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:27.494431973 CET	54455	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:27.515077114 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.515122890 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:27.515938044 CET	54455	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:27.555684090 CET	54455	443	192.168.2.24	23.55.235.242
Jan 10, 2025 16:23:27.635628939 CET	443	54455	23.55.235.242	192.168.2.24
Jan 10, 2025 16:23:31.874969006 CET	51580	53	192.168.2.24	1.1.1.1
Jan 10, 2025 16:23:31.909228086 CET	53	51580	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:35.432725906 CET	53	52456	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:45.831640959 CET	53	60137	1.1.1.1	192.168.2.24
Jan 10, 2025 16:23:54.509893894 CET	53	61705	1.1.1.1	192.168.2.24

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 16:21:50.418462992 CET	192.168.2.24	1.1.1.1	0x25f	Standard query (0)	pcapp.store	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.713818073 CET	192.168.2.24	1.1.1.1	0x3c65	Standard query (0)	pcapp.store	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.714258909 CET	192.168.2.24	1.1.1.1	0x9f59	Standard query (0)	pcapp.store	65	IN (0x0001)	false
Jan 10, 2025 16:23:16.838347912 CET	192.168.2.24	1.1.1.1	0x1b87	Standard query (0)	delivery.pcapp.store	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.325028896 CET	192.168.2.24	1.1.1.1	0x24ec	Standard query (0)	repository.pcapp.store	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.325263023 CET	192.168.2.24	1.1.1.1	0x8816	Standard query (0)	repository.pcapp.store	65	IN (0x0001)	false
Jan 10, 2025 16:23:19.343394995 CET	192.168.2.24	1.1.1.1	0xf901	Standard query (0)	pcapp.store	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.343538046 CET	192.168.2.24	1.1.1.1	0x4d79	Standard query (0)	pcapp.store	65	IN (0x0001)	false
Jan 10, 2025 16:23:20.227242947 CET	192.168.2.24	1.1.1.1	0xa57b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.227468967 CET	192.168.2.24	1.1.1.1	0x79b2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 16:23:20.244972944 CET	192.168.2.24	1.1.1.1	0x2b9e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.245110035 CET	192.168.2.24	1.1.1.1	0xeb88	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 16:23:20.261007071 CET	192.168.2.24	1.1.1.1	0xfff	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.261172056 CET	192.168.2.24	1.1.1.1	0x1cd6	Standard query (0)	google.com	65	IN (0x0001)	false
Jan 10, 2025 16:23:20.268719912 CET	192.168.2.24	1.1.1.1	0x9ebf	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.268944979 CET	192.168.2.24	1.1.1.1	0x6353	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 16:23:20.404078007 CET	192.168.2.24	1.1.1.1	0xe688	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.404958010 CET	192.168.2.24	1.1.1.1	0x12f0	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jan 10, 2025 16:23:20.406622887 CET	192.168.2.24	1.1.1.1	0x280c	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.407140970 CET	192.168.2.24	1.1.1.1	0x5353	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 16:23:20.845169067 CET	192.168.2.24	1.1.1.1	0xd146	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.845304012 CET	192.168.2.24	1.1.1.1	0xfe1d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 16:23:21.842566967 CET	192.168.2.24	1.1.1.1	0xe187	Standard query (0)	publickeyservice.pa.gcp.privacysandboxservices.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:21.843059063 CET	192.168.2.24	1.1.1.1	0x410f	Standard query (0)	publickeyservice.pa.gcp.privacysandboxservices.com	65	IN (0x0001)	false
Jan 10, 2025 16:23:21.844153881 CET	192.168.2.24	1.1.1.1	0x1358	Standard query (0)	publickeyservice.pa.aws.privacysandboxservices.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:21.844547033 CET	192.168.2.24	1.1.1.1	0x3b65	Standard query (0)	publickeyservice.pa.aws.privacysandboxservices.com	65	IN (0x0001)	false
Jan 10, 2025 16:23:23.185529947 CET	192.168.2.24	1.1.1.1	0xf235	Standard query (0)	repository.pcapp.store	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.185873985 CET	192.168.2.24	1.1.1.1	0x5140	Standard query (0)	repository.pcapp.store	65	IN (0x0001)	false
Jan 10, 2025 16:23:23.223088980 CET	192.168.2.24	1.1.1.1	0xf0af	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.223237991 CET	192.168.2.24	1.1.1.1	0x6ed0	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 16:23:23.247601986 CET	192.168.2.24	1.1.1.1	0x208b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.247745037 CET	192.168.2.24	1.1.1.1	0xb7cf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 16:23:31.874969006 CET	192.168.2.24	1.1.1.1	0x1aac	Standard query (0)	d74queuslupub.cloudfront.net	A (IP address)	IN (0x0001)	false
2025-01-10 15:23:04 UTC	192.168.2.24	172.64.41.3	0x0	Standard query (0)	windows.msn.com	A (IP address)	IN (0x0001)	true
2025-01-10 15:23:04 UTC	192.168.2.24	172.64.41.3	0x0	Standard query (0)	universalstore.streaming.mediaservices.windows.net	A (IP address)	IN (0x0001)	true
2025-01-10 15:23:04 UTC	192.168.2.24	172.64.41.3	0x0	Standard query (0)	assets.msn.com	A (IP address)	IN (0x0001)	true

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 16:21:50.425858021 CET	1.1.1.1	192.168.2.24	0x25f	No error (0)	pcapp.store		167.99.235.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:21:50.425858021 CET	1.1.1.1	192.168.2.24	0x25f	No error (0)	pcapp.store		159.223.126.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:21:50.425858021 CET	1.1.1.1	192.168.2.24	0x25f	No error (0)	pcapp.store		64.176.203.93	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:21:50.425858021 CET	1.1.1.1	192.168.2.24	0x25f	No error (0)	pcapp.store		159.203.177.96	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:21:50.425858021 CET	1.1.1.1	192.168.2.24	0x25f	No error (0)	pcapp.store		207.246.91.177	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:21:50.425858021 CET	1.1.1.1	192.168.2.24	0x25f	No error (0)	pcapp.store		104.248.126.225	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:21:50.425858021 CET	1.1.1.1	192.168.2.24	0x25f	No error (0)	pcapp.store		45.32.1.23	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:21:50.425858021 CET	1.1.1.1	192.168.2.24	0x25f	No error (0)	pcapp.store		209.222.21.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:21:50.425858021 CET	1.1.1.1	192.168.2.24	0x25f	No error (0)	pcapp.store		159.223.101.159	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.721105099 CET	1.1.1.1	192.168.2.24	0x3c65	No error (0)	pcapp.store		159.203.177.96	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.721105099 CET	1.1.1.1	192.168.2.24	0x3c65	No error (0)	pcapp.store		64.176.203.93	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.721105099 CET	1.1.1.1	192.168.2.24	0x3c65	No error (0)	pcapp.store		45.32.1.23	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.721105099 CET	1.1.1.1	192.168.2.24	0x3c65	No error (0)	pcapp.store		167.99.235.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.721105099 CET	1.1.1.1	192.168.2.24	0x3c65	No error (0)	pcapp.store		207.246.91.177	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.721105099 CET	1.1.1.1	192.168.2.24	0x3c65	No error (0)	pcapp.store		209.222.21.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.721105099 CET	1.1.1.1	192.168.2.24	0x3c65	No error (0)	pcapp.store		104.248.126.225	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.721105099 CET	1.1.1.1	192.168.2.24	0x3c65	No error (0)	pcapp.store		159.223.101.159	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.721105099 CET	1.1.1.1	192.168.2.24	0x3c65	No error (0)	pcapp.store		159.223.126.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.849515915 CET	1.1.1.1	192.168.2.24	0x1b87	No error (0)	delivery.pcapp.store	1285660440.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:23:16.849515915 CET	1.1.1.1	192.168.2.24	0x1b87	No error (0)	1285660440.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.849515915 CET	1.1.1.1	192.168.2.24	0x1b87	No error (0)	1285660440.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.849515915 CET	1.1.1.1	192.168.2.24	0x1b87	No error (0)	1285660440.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.849515915 CET	1.1.1.1	192.168.2.24	0x1b87	No error (0)	1285660440.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.849515915 CET	1.1.1.1	192.168.2.24	0x1b87	No error (0)	1285660440.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:16.849515915 CET	1.1.1.1	192.168.2.24	0x1b87	No error (0)	1285660440.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.335737944 CET	1.1.1.1	192.168.2.24	0x8816	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:23:19.337958097 CET	1.1.1.1	192.168.2.24	0x24ec	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:23:19.337958097 CET	1.1.1.1	192.168.2.24	0x24ec	No error (0)	1715720427.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.337958097 CET	1.1.1.1	192.168.2.24	0x24ec	No error (0)	1715720427.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.337958097 CET	1.1.1.1	192.168.2.24	0x24ec	No error (0)	1715720427.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.337958097 CET	1.1.1.1	192.168.2.24	0x24ec	No error (0)	1715720427.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.337958097 CET	1.1.1.1	192.168.2.24	0x24ec	No error (0)	1715720427.rsc.cdn77.org		169.150.255.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.337958097 CET	1.1.1.1	192.168.2.24	0x24ec	No error (0)	1715720427.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.352720022 CET	1.1.1.1	192.168.2.24	0xf901	No error (0)	pcapp.store		159.223.126.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.352720022 CET	1.1.1.1	192.168.2.24	0xf901	No error (0)	pcapp.store		207.246.91.177	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.352720022 CET	1.1.1.1	192.168.2.24	0xf901	No error (0)	pcapp.store		64.176.203.93	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.352720022 CET	1.1.1.1	192.168.2.24	0xf901	No error (0)	pcapp.store		45.32.1.23	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.352720022 CET	1.1.1.1	192.168.2.24	0xf901	No error (0)	pcapp.store		159.203.177.96	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.352720022 CET	1.1.1.1	192.168.2.24	0xf901	No error (0)	pcapp.store		104.248.126.225	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.352720022 CET	1.1.1.1	192.168.2.24	0xf901	No error (0)	pcapp.store		209.222.21.115	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.352720022 CET	1.1.1.1	192.168.2.24	0xf901	No error (0)	pcapp.store		159.223.101.159	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:19.352720022 CET	1.1.1.1	192.168.2.24	0xf901	No error (0)	pcapp.store		167.99.235.203	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.234011889 CET	1.1.1.1	192.168.2.24	0xa57b	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.234065056 CET	1.1.1.1	192.168.2.24	0x79b2	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 16:23:20.251823902 CET	1.1.1.1	192.168.2.24	0xeb88	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 16:23:20.251843929 CET	1.1.1.1	192.168.2.24	0x2b9e	No error (0)	googleads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.268032074 CET	1.1.1.1	192.168.2.24	0x1cd6	No error (0)	google.com			65	IN (0x0001)	false
Jan 10, 2025 16:23:20.268558979 CET	1.1.1.1	192.168.2.24	0xfff	No error (0)	google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.275693893 CET	1.1.1.1	192.168.2.24	0x9ebf	No error (0)	td.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.410933018 CET	1.1.1.1	192.168.2.24	0xe688	No error (0)	analytics.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.412266016 CET	1.1.1.1	192.168.2.24	0x12f0	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:23:20.413093090 CET	1.1.1.1	192.168.2.24	0x280c	No error (0)	stats.g.doubleclick.net		142.251.173.156	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.413093090 CET	1.1.1.1	192.168.2.24	0x280c	No error (0)	stats.g.doubleclick.net		142.251.173.155	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.413093090 CET	1.1.1.1	192.168.2.24	0x280c	No error (0)	stats.g.doubleclick.net		142.251.173.157	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.413093090 CET	1.1.1.1	192.168.2.24	0x280c	No error (0)	stats.g.doubleclick.net		142.251.173.154	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:20.852148056 CET	1.1.1.1	192.168.2.24	0xfe1d	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 16:23:20.852408886 CET	1.1.1.1	192.168.2.24	0xd146	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:21.849555969 CET	1.1.1.1	192.168.2.24	0xe187	No error (0)	publickeyservice.pa.gcp.privacysandboxservices.com	publickeyservice-a.pa-3.gcp.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:23:21.849555969 CET	1.1.1.1	192.168.2.24	0xe187	No error (0)	publickeyservice-a.pa-3.gcp.privacysandboxservices.com		34.111.189.158	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:21.850142956 CET	1.1.1.1	192.168.2.24	0x410f	No error (0)	publickeyservice.pa.gcp.privacysandboxservices.com	publickeyservice-a.pa-3.gcp.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:23:21.851118088 CET	1.1.1.1	192.168.2.24	0x1358	No error (0)	publickeyservice.pa.aws.privacysandboxservices.com	publickeyservice.pa-3.aws.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:23:21.851118088 CET	1.1.1.1	192.168.2.24	0x1358	No error (0)	publickeyservice.pa-3.aws.privacysandboxservices.com		13.32.99.65	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:21.851118088 CET	1.1.1.1	192.168.2.24	0x1358	No error (0)	publickeyservice.pa-3.aws.privacysandboxservices.com		13.32.99.29	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:21.851118088 CET	1.1.1.1	192.168.2.24	0x1358	No error (0)	publickeyservice.pa-3.aws.privacysandboxservices.com		13.32.99.64	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:21.851118088 CET	1.1.1.1	192.168.2.24	0x1358	No error (0)	publickeyservice.pa-3.aws.privacysandboxservices.com		13.32.99.51	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:21.852588892 CET	1.1.1.1	192.168.2.24	0x3b65	No error (0)	publickeyservice.pa.aws.privacysandboxservices.com	publickeyservice.pa-3.aws.privacysandboxservices.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:23:23.194974899 CET	1.1.1.1	192.168.2.24	0x5140	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:23:23.195054054 CET	1.1.1.1	192.168.2.24	0xf235	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 16:23:23.195054054 CET	1.1.1.1	192.168.2.24	0xf235	No error (0)	1715720427.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.195054054 CET	1.1.1.1	192.168.2.24	0xf235	No error (0)	1715720427.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.195054054 CET	1.1.1.1	192.168.2.24	0xf235	No error (0)	1715720427.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.195054054 CET	1.1.1.1	192.168.2.24	0xf235	No error (0)	1715720427.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.195054054 CET	1.1.1.1	192.168.2.24	0xf235	No error (0)	1715720427.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.195054054 CET	1.1.1.1	192.168.2.24	0xf235	No error (0)	1715720427.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.195054054 CET	1.1.1.1	192.168.2.24	0xf235	No error (0)	1715720427.rsc.cdn77.org		169.150.255.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.231054068 CET	1.1.1.1	192.168.2.24	0xf0af	No error (0)	googleads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.231085062 CET	1.1.1.1	192.168.2.24	0x6ed0	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 16:23:23.254390001 CET	1.1.1.1	192.168.2.24	0x208b	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:23.254784107 CET	1.1.1.1	192.168.2.24	0xb7cf	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 16:23:31.909228086 CET	1.1.1.1	192.168.2.24	0x1aac	No error (0)	d74queuslupub.cloudfront.net		18.173.205.91	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:31.909228086 CET	1.1.1.1	192.168.2.24	0x1aac	No error (0)	d74queuslupub.cloudfront.net		18.173.205.117	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:31.909228086 CET	1.1.1.1	192.168.2.24	0x1aac	No error (0)	d74queuslupub.cloudfront.net		18.173.205.24	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:31.909228086 CET	1.1.1.1	192.168.2.24	0x1aac	No error (0)	d74queuslupub.cloudfront.net		18.173.205.111	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:45.485004902 CET	1.1.1.1	192.168.2.24	0x5eea	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:45.485004902 CET	1.1.1.1	192.168.2.24	0x5eea	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:46.497759104 CET	1.1.1.1	192.168.2.24	0x5eea	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:46.497759104 CET	1.1.1.1	192.168.2.24	0x5eea	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:47.515147924 CET	1.1.1.1	192.168.2.24	0x5eea	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:47.515147924 CET	1.1.1.1	192.168.2.24	0x5eea	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:49.517240047 CET	1.1.1.1	192.168.2.24	0x5eea	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:49.517240047 CET	1.1.1.1	192.168.2.24	0x5eea	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:53.522732019 CET	1.1.1.1	192.168.2.24	0x5eea	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jan 10, 2025 16:23:53.522732019 CET	1.1.1.1	192.168.2.24	0x5eea	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
2025-01-10 15:23:04 UTC	172.64.41.3	192.168.2.24	0x0	No error (0)	universalstore.streaming.mediaservices.windows.net	c9371f6604c74c62b5cc96335743d2ff.azureedge.net		CNAME (Canonical name)	IN (0x0001)	true
2025-01-10 15:23:04 UTC	172.64.41.3	192.168.2.24	0x0	No error (0)	windows.msn.com	www-msn-com.a-0003.a-msedge.net		CNAME (Canonical name)	IN (0x0001)	true

HTTP Request Dependency Graph

pcapp.store

https:

assets.msn.com

browser.events.data.msn.com

repository.pcapp.store

googleads.g.doubleclick.net

www.google.com

google.com

td.doubleclick.net

stats.g.doubleclick.net

browser.events.data.msn.cn

chrome.cloudflare-dns.com

delivery.pcapp.store

publickeyservice.pa.gcp.privacysandboxservices.com

d74queuslupub.cloudfront.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.24	49751	167.99.235.203	443	6844	C:\Users\user\Desktop\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:21:50 UTC	259	OUT	POST /inst_cpg.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&version=fa.2002&src=pcapp_mini&uc=16le HTTP/1.1 Content-Type: application/json User-Agent: NSIS_wininet Host: pcapp.store Content-Length: 4648 Cache-Control: no-cache
2025-01-10 15:21:50 UTC	4648	OUT	Data Raw: 7b 00 22 00 73 00 79 00 73 00 74 00 65 00 6d 00 5f 00 73 00 74 00 61 00 74 00 73 00 22 00 3a 00 7b 00 22 00 6f 00 73 00 5f 00 6e 00 61 00 6d 00 65 00 22 00 3a 00 22 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2b 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 2b 00 31 00 31 00 2b 00 50 00 72 00 6f 00 22 00 2c 00 22 00 6f 00 73 00 5f 00 69 00 6e 00 73 00 74 00 61 00 6c 00 6c 00 64 00 61 00 74 00 65 00 22 00 3a 00 22 00 32 00 30 00 32 00 34 00 31 00 32 00 30 00 39 00 31 00 39 00 31 00 30 00 31 00 39 00 25 00 32 00 45 00 30 00 30 00 30 00 30 00 30 00 30 00 25 00 32 00 42 00 30 00 36 00 30 00 22 00 2c 00 22 00 6f 00 73 00 5f 00 70 00 72 00 6f 00 63 00 65 00 73 00 73 00 65 00 73 00 22 00 3a 00 22 00 31 00 31 00 35 00 22 00 2c 00 22 00 6f 00 73 00 5f Data Ascii: {"system_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_
2025-01-10 15:21:51 UTC	509	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:21:51 UTC	229	IN	Data Raw: 64 61 0d 0a 7b 00 22 00 63 00 70 00 67 00 22 00 3a 00 22 00 64 00 65 00 66 00 61 00 75 00 6c 00 74 00 22 00 2c 00 22 00 69 00 6e 00 73 00 74 00 5f 00 65 00 78 00 63 00 6c 00 22 00 3a 00 6e 00 75 00 6c 00 6c 00 2c 00 22 00 69 00 6e 00 73 00 74 00 5f 00 61 00 64 00 64 00 6f 00 6e 00 22 00 3a 00 7b 00 22 00 65 00 75 00 6c 00 61 00 22 00 3a 00 22 00 73 00 6b 00 69 00 70 00 70 00 65 00 64 00 22 00 7d 00 2c 00 22 00 69 00 6e 00 73 00 74 00 5f 00 61 00 64 00 76 00 61 00 6e 00 63 00 65 00 64 00 22 00 3a 00 7b 00 22 00 70 00 61 00 74 00 68 00 22 00 3a 00 22 00 31 00 22 00 2c 00 22 00 73 00 74 00 61 00 72 00 74 00 75 00 70 00 22 00 3a 00 22 00 31 00 22 00 7d 00 7d 00 0d 0a 30 0d 0a 0d 0a Data Ascii: da{"cpg":"default","inst_excl":null,"inst_addon":{"eula":"skipped"},"inst_advanced":{"path":"1","startup":"1"}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.24	49752	167.99.235.203	443	6844	C:\Users\user\Desktop\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:21:51 UTC	263	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=show_page&p=wel&_fcid=1736265551741605 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:21:51 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:21:51 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:21:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.24	49756	104.126.37.201	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:22:50 UTC	881	OUT	GET /service/news/feed/pages/dashboard4?aver=1.1.200.0&over=10.0.22631.4169.amd64fre.ni_release.220506-1250&fring=Retail&devicetype=1&oem=VMware%2C%20Inc.&smode=false&machineId=%7BADA0F343-6E11-4C03-89DA-546517CD1A62%7D&clv=3.0&hver=524.30502.30.0&locale=en-US&region=CH&apikey=lxSNtibdZ45aPe8BHuUR6XwhuuruYfwejEYNpSqgcd&ocid=winp2widget&timeOut=2000&activityId=293baa31-2af8-4f1e-924e-413af5be3dea&user=m-14EA2E828C4D639509943BD28D2B6272&cm=de-ch&caller=bgtask&theme=light&nw=false&msrc=0&it=app&scn=al_app_anon&clientFeatures=1 HTTP/1.1 Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate muid: 14EA2E828C4D639509943BD28D2B6272 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0 Host: assets.msn.com Connection: Keep-Alive Cookie: MUID=14EA2E828C4D639509943BD28D2B6272

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.24	49755	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:22:52 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 31 36 0d 0a 4d 53 2d 43 56 3a 20 75 71 33 68 45 79 6c 76 33 30 36 67 4a 4c 52 2b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 61 35 32 30 38 62 66 64 31 64 62 36 34 33 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 316MS-CV: uq3hEylv306gJLR+.1Context: 7a5208bfd1db6433
2025-01-10 15:22:52 UTC	260	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 32 32 36 33 31 2e 34 31 36 39 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 30 30 31 38 30 30 31 32 41 38 34 34 37 39 41 41 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.22631.4169</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>00180012A84479AA</deviceName><followRetry>true</followRetry></agent></con
2025-01-10 15:22:52 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 75 71 33 68 45 79 6c 76 33 30 36 67 4a 4c 52 2b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 61 35 32 30 38 62 66 64 31 64 62 36 34 33 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 53 76 57 2b 6c 34 6b 31 4c 4c 61 6b 59 45 42 52 71 67 2f 77 49 77 2f 34 61 54 74 66 75 68 67 30 4a 48 55 35 37 48 54 6a 57 44 4c 76 4e 55 74 4b 5a 41 68 59 48 6c 39 65 6f 38 4a 42 67 48 2b 65 63 66 71 2f 2b 72 41 2f 33 73 50 67 2f 7a 65 46 66 46 78 6c 6c 38 58 61 78 2b 76 50 37 77 55 6f 34 66 79 6a 4b 6b 65 43 5a 43 71 63 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: uq3hEylv306gJLR+.2Context: 7a5208bfd1db6433<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARSvW+l4k1LLakYEBRqg/wIw/4aTtfuhg0JHU57HTjWDLvNUtKZAhYHl9eo8JBgH+ecfq/+rA/3sPg/zeFfFxll8Xax+vP7wUo4fyjKkeCZCqc
2025-01-10 15:22:52 UTC	224	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 39 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 75 71 33 68 45 79 6c 76 33 30 36 67 4a 4c 52 2b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 61 35 32 30 38 62 66 64 31 64 62 36 34 33 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044479 197MS-CV: uq3hEylv306gJLR+.3Context: 7a5208bfd1db6433<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-10 15:22:52 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-10 15:22:52 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 56 6b 78 47 2f 38 44 55 38 55 4b 49 45 67 70 6d 36 6b 52 55 57 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: VkxG/8DU8UKIEgpm6kRUWw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.24	59520	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:22:53 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 31 36 0d 0a 4d 53 2d 43 56 3a 20 6a 58 4b 30 6e 4f 31 66 55 30 32 56 56 52 4d 38 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 36 61 35 63 66 36 39 30 65 36 37 33 33 64 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 316MS-CV: jXK0nO1fU02VVRM8.1Context: 36a5cf690e6733df
2025-01-10 15:22:53 UTC	260	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 32 32 36 33 31 2e 34 31 36 39 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 30 30 31 38 30 30 31 32 41 38 34 34 37 39 41 41 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.22631.4169</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>00180012A84479AA</deviceName><followRetry>true</followRetry></agent></con
2025-01-10 15:22:53 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6a 58 4b 30 6e 4f 31 66 55 30 32 56 56 52 4d 38 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 36 61 35 63 66 36 39 30 65 36 37 33 33 64 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 53 76 57 2b 6c 34 6b 31 4c 4c 61 6b 59 45 42 52 71 67 2f 77 49 77 2f 34 61 54 74 66 75 68 67 30 4a 48 55 35 37 48 54 6a 57 44 4c 76 4e 55 74 4b 5a 41 68 59 48 6c 39 65 6f 38 4a 42 67 48 2b 65 63 66 71 2f 2b 72 41 2f 33 73 50 67 2f 7a 65 46 66 46 78 6c 6c 38 58 61 78 2b 76 50 37 77 55 6f 34 66 79 6a 4b 6b 65 43 5a 43 71 63 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: jXK0nO1fU02VVRM8.2Context: 36a5cf690e6733df<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARSvW+l4k1LLakYEBRqg/wIw/4aTtfuhg0JHU57HTjWDLvNUtKZAhYHl9eo8JBgH+ecfq/+rA/3sPg/zeFfFxll8Xax+vP7wUo4fyjKkeCZCqc
2025-01-10 15:22:53 UTC	224	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 39 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6a 58 4b 30 6e 4f 31 66 55 30 32 56 56 52 4d 38 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 36 61 35 63 66 36 39 30 65 36 37 33 33 64 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044479 197MS-CV: jXK0nO1fU02VVRM8.3Context: 36a5cf690e6733df<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-10 15:22:54 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-10 15:22:54 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 65 73 6c 4d 75 70 47 66 51 45 71 53 4c 30 46 38 79 50 54 44 41 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: eslMupGfQEqSL0F8yPTDAA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.24	59523	104.126.37.201	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:01 UTC	887	OUT	GET /service/news/feed/pages/dashboard4?aver=1.1.200.0&over=10.0.22631.4169.amd64fre.ni_release.220506-1250&fring=Retail&devicetype=1&oem=VMware%2C%20Inc.&smode=false&machineId=%7BADA0F343-6E11-4C03-89DA-546517CD1A62%7D&clv=3.0&hver=524.30502.30.0&locale=en-US&region=CH&apikey=lxSNtibdZ45aPe8BHuUR6XwhuuruYfwejEYNpSqgcd&ocid=winp2widget&timeOut=2000&activityId=fde7885d-f607-4cc9-bdad-8f7a12df416a&user=m-14EA2E828C4D639509943BD28D2B6272&cm=de-ch&caller=retryBgFetch&theme=light&nw=false&msrc=0&it=app&scn=al_app_anon&clientFeatures=1 HTTP/1.1 Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate muid: 14EA2E828C4D639509943BD28D2B6272 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0 Host: assets.msn.com Connection: Keep-Alive Cookie: MUID=14EA2E828C4D639509943BD28D2B6272
2025-01-10 15:23:02 UTC	3936	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-TMPL: StableIdCS:14EA2E828C4D639509943BD28D2B6272;v_click_1;XFeed;RR:0;ATFSignalTriggered:1;triggercf_1_i2i_mhot_v1;TaggingUserActionSignal;cptvtn_a-0_sr-0_nw-0_t-0;tmpl-video;GrayClick4d:0;PageViewCount0;tmpl-promotedad:1;FCRelBarP_0.32;GrayV6FansScoreV2:0.0000;TileID:dr5r;UIC#t1_8\|11.75\|0.72\|0.61;FCTarget\|1\|0.21_4\|0.1_3\|0.14_7\|0.55_0\|0.15;wxunt:_C;v_click28d_1;InterestCount:3;triggercf;ISR:1;UserCohortByEngagement28d:1;RelevanceWarmUser;StrongDemotionV2Trigger:0;1s-ondemand-promotedad;UserGroupId:2_1_4_0_0_312103_312103;IsRecoNewUser:1;IMArticleNegUser:0;FCSignal#1\|0;RecoSource:Notification_;UserProfileActionSignal:1;wpo-coldstart:1;P2DeviceWithEL;ULatLon40.75:-73.99;triggercf_5_cfxeverything_0;tmpl-1spromoondmd;WxCardValid:1;triggercf_5_everything_v2_gbl;v_MainFeedsColdUser:true;UIC#t1_6\|14.31\|0\|0.11;tmpl-cc;SageUser:0;click_1;FCSupply#7\|101_3\|26_1\|5_4\|8;eePosList:0;WxLockScreen:Weather3DLock_Nowcast;GrayV6FansScore:0.0000;GrayFanScore:0.0000;GANone:1;MyFeed;ExplcitFollowCohort:0;Click4d:0;user_cluster [TRUNCATED] DDD-StrategyExecutionLatency: 00:00:00.6966893 x-wpo-activityId: AE2445D1-9630-4890-B862-8AEE935C4F45\|2025-01-10T15:23:02.8032481Z\|fabric_wpo\|FRC-C\|WPO_550 DDD-FeatureSet: 0,Msn.OneDataService.Search.FeatureTracker.Models.NewsFeedFeature:wgAA; DDD-ActivityId: ae2445d1-9630-4890-b862-8aee935c4f45 DDD-FeedNewsItemCount: 31 DDD-TMPL-Removed: False DDD-DebugId: ae2445d1-9630-4890-b862-8aee935c4f45\|2025-01-10T15:23:02.8421588Z\|fabric_winfeed\|FRC-C\|WinFeed_2282 DDD-Auth-Features: AT:NA;DID:m-14EA2E828C4D639509943BD28D2B6272;IT:App;MuidStateOrigin:MuidFromHeader OneWebServiceLatency: 698 X-MSEdge-ResponseInfo: 698 X-1S-FallbackReason: RetryOnThrottling X-Ceto-ref: 67813b56b5b743068f688baa41ab37b6\|AFD:67813b56b5b743068f688baa41ab37b6\|2025-01-10T15:23:02.131Z Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 142A5F71D5A143C1827C4A7D26B9FBEE Ref B: FRA31EDGE0217 Ref C: 2025-01-10T15:23:02Z Expires: Fri, 10 Jan 2025 15:23:02 GMT Date: Fri, 10 Jan 2025 15:23:02 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: _C_ETH=1; domain=.msn.com; path=/; secure; httponly Set-Cookie: _C_Auth= Set-Cookie: msnup=; expires=Sun, 23 Feb 2025 15:23:02 GMT; domain=.msn.com; path=/; secure; samesite=none; httponly Set-Cookie: MUIDB=14EA2E828C4D639509943BD28D2B6272; expires=Wed, 04 Feb 2026 15:23:02 GMT; path=/; httponly Set-Cookie: _EDGE_S=SID=22ED33CB387A6741135226BB3954664D; domain=.msn.com; path=/; httponly Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=104.126.37.191,b=942101680,c=g,n=DE_HE_FRANKFURT,o=20940],[a=204.79.197.203,c=o] Server-Timing: clientrtt; dur=86, clienttt; dur=730, origin; dur=716, cdntime; dur=14, wpo;dur=35,1s;dur=638 Akamai-Cache-Status: NotCacheable from child Akamai-Server-IP: 104.126.37.191 Akamai-Request-ID: 382754b0 X-AS-SuppressSetCookie: 1 Cache-Control: private, max-age=0 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.bf257e68.1736522582.382754b0 Vary: Origin
2025-01-10 15:23:02 UTC	12448	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 7b 22 6e 65 78 74 50 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6d 73 6e 2e 63 6f 6d 2f 6e 65 77 73 2f 66 65 65 64 2f 70 61 67 65 73 2f 64 61 73 68 62 6f 61 72 64 34 3f 61 63 74 69 76 69 74 79 49 64 3d 66 64 65 37 38 38 35 64 2d 66 36 30 37 2d 34 63 63 39 2d 62 64 61 64 2d 38 66 37 61 31 32 64 66 34 31 36 61 26 74 69 6d 65 4f 75 74 3d 32 30 30 30 26 6f 63 69 64 3d 77 69 6e 70 32 77 69 64 67 65 74 26 73 63 6e 3d 61 6c 5f 61 70 70 5f 61 6e 6f 6e 26 61 70 69 6b 65 79 3d 6c 78 53 4e 74 69 62 64 5a 34 35 61 50 65 38 42 48 75 55 52 36 58 77 68 75 75 72 75 59 66 77 65 6a 45 59 4e 70 53 71 67 63 64 26 63 6d 3d 64 65 2d 63 68 26 55 73 65 72 3d 6d 2d 31 34 45 41 32 45 38 32 38 43 34 44 36 33 39 35 30 39 39 34 33 42 Data Ascii: 00006000{"nextPageUrl":"https://api.msn.com/news/feed/pages/dashboard4?activityId=fde7885d-f607-4cc9-bdad-8f7a12df416a&timeOut=2000&ocid=winp2widget&scn=al_app_anon&apikey=lxSNtibdZ45aPe8BHuUR6XwhuuruYfwejEYNpSqgcd&cm=de-ch&User=m-14EA2E828C4D639509943B
2025-01-10 15:23:03 UTC	12140	IN	Data Raw: 75 62 73 74 61 6e 7a 20 66 69 6e 64 65 74 20 6e 69 63 68 74 20 64 65 6e 20 57 65 67 20 69 6e 20 64 69 65 20 4e 61 73 65 2e 22 2c 22 72 65 61 64 54 69 6d 65 4d 69 6e 22 3a 32 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 73 6e 2e 63 6f 6d 2f 64 65 2d 63 68 2f 66 69 6e 61 6e 7a 65 6e 2f 77 69 72 74 73 63 68 61 66 74 2f 64 69 65 2d 67 61 6e 7a 65 2d 73 63 68 77 65 69 7a 2d 73 63 68 6e 75 64 64 65 72 74 2d 6a 65 74 7a 74 2d 7a 65 69 67 74 2d 6e 65 75 65 2d 75 73 2d 73 74 75 64 69 65 2d 6e 65 6f 63 69 74 72 61 6e 2d 77 69 72 6b 73 74 6f 66 66 2d 6e 25 43 33 25 42 43 74 7a 74 2d 67 61 72 2d 6e 69 63 68 74 73 2f 61 72 2d 42 42 31 72 64 45 7a 38 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 64 65 2d 63 68 22 2c 22 69 73 4c 6f 63 61 6c 43 6f 6e 74 65 6e 74 Data Ascii: ubstanz findet nicht den Weg in die Nase.","readTimeMin":2,"url":"https://www.msn.com/de-ch/finanzen/wirtschaft/die-ganze-schweiz-schnuddert-jetzt-zeigt-neue-us-studie-neocitran-wirkstoff-n%C3%BCtzt-gar-nichts/ar-BB1rdEz8","locale":"de-ch","isLocalContent
2025-01-10 15:23:03 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 2c 22 63 61 70 74 69 6f 6e 22 3a 22 3c 70 3e 54 72 c3 a4 75 6d 65 6e 20 53 69 65 20 64 61 76 6f 6e 2c 20 49 68 72 65 20 4a 75 67 65 6e 64 6c 69 63 68 6b 65 69 74 20 6c c3 a4 6e 67 65 72 20 7a 75 20 62 65 77 61 68 72 65 6e 3f 20 3c 2f 70 3e 3c 70 3e 56 69 65 6c 65 20 46 72 61 75 65 6e 20 61 6c 74 65 72 6e 20 6c 61 6e 67 73 61 6d 65 72 20 61 6c 73 20 69 68 72 65 20 46 72 65 75 6e 64 69 6e 6e 65 6e 20 e2 80 93 20 75 6e 64 20 64 61 73 20 6c 69 65 67 74 20 6e 69 63 68 74 20 6e 75 72 20 61 6d 20 47 6c c3 bc 63 6b 2e 20 4b 6c 65 69 6e 65 20 74 c3 a4 67 6c 69 63 68 65 20 47 65 77 6f 68 6e 68 65 69 74 65 6e 20 6b c3 b6 6e 6e 65 6e 20 65 69 6e 65 6e 20 67 72 6f c3 9f 65 6e 20 55 6e 74 65 72 73 63 68 69 65 64 20 6d 61 63 68 65 6e 2e Data Ascii: 00006000","caption":"<p>Trumen Sie davon, Ihre Jugendlichkeit lnger zu bewahren? </p><p>Viele Frauen altern langsamer als ihre Freundinnen und das liegt nicht nur am Glck. Kleine tgliche Gewohnheiten knnen einen groen Unterschied machen.
2025-01-10 15:23:03 UTC	8204	IN	Data Raw: 65 78 43 6f 6c 6f 72 22 3a 22 23 65 66 65 36 65 35 22 2c 22 67 72 61 64 69 65 6e 74 41 6e 67 6c 65 22 3a 22 31 33 35 64 65 67 22 2c 22 69 73 47 72 65 79 53 63 61 6c 65 22 3a 66 61 6c 73 65 7d 5d 2c 22 70 72 6f 76 69 64 65 72 22 3a 7b 22 69 64 22 3a 22 42 42 6b 49 48 61 7a 22 2c 22 6e 61 6d 65 22 3a 22 77 61 74 73 6f 6e 2e 63 68 22 2c 22 6c 6f 67 6f 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6d 67 2d 73 2d 6d 73 6e 2d 63 6f 6d 2e 61 6b 61 6d 61 69 7a 65 64 2e 6e 65 74 2f 74 65 6e 61 6e 74 2f 61 6d 70 2f 65 6e 74 69 74 79 69 64 2f 41 41 4d 71 46 6d 46 2e 69 6d 67 22 2c 22 70 72 6f 66 69 6c 65 49 64 22 3a 22 76 69 64 2d 39 76 36 6b 73 69 79 6d 72 67 71 39 70 69 32 69 39 69 37 36 74 75 63 68 73 36 35 70 37 68 71 75 6b 70 68 6e 6e 30 38 61 62 6d 63 6d 64 70 Data Ascii: exColor":"#efe6e5","gradientAngle":"135deg","isGreyScale":false}],"provider":{"id":"BBkIHaz","name":"watson.ch","logoUrl":"https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAMqFmF.img","profileId":"vid-9v6ksiymrgq9pi2i9i76tuchs65p7hqukphnn08abmcmdp
2025-01-10 15:23:03 UTC	13541	IN	Data Raw: 30 30 30 30 33 34 44 39 0d 0a 6f 74 61 6c 43 6f 75 6e 74 22 3a 31 2c 22 73 75 62 52 65 61 63 74 69 6f 6e 53 75 6d 6d 61 72 69 65 73 22 3a 5b 7b 22 74 6f 74 61 6c 43 6f 75 6e 74 22 3a 31 2c 22 74 79 70 65 22 3a 22 75 70 76 6f 74 65 22 7d 5d 7d 2c 22 72 65 61 63 74 69 6f 6e 53 74 61 74 75 73 22 3a 22 6f 6e 22 2c 22 63 6f 6d 6d 65 6e 74 53 75 6d 6d 61 72 79 22 3a 7b 22 74 6f 74 61 6c 43 6f 75 6e 74 22 3a 32 2c 22 73 75 62 43 6f 6d 6d 65 6e 74 53 75 6d 6d 61 72 69 65 73 22 3a 5b 7b 22 74 6f 74 61 6c 43 6f 75 6e 74 22 3a 32 2c 22 74 79 70 65 22 3a 22 63 6f 6d 6d 65 6e 74 22 7d 5d 7d 2c 22 63 6f 6d 6d 65 6e 74 53 74 61 74 75 73 22 3a 22 6f 6e 22 2c 22 72 65 63 6f 44 6f 63 4d 65 74 61 64 61 74 61 22 3a 6e 75 6c 6c 2c 22 66 65 65 64 22 3a 7b 22 66 65 65 64 4e 61 Data Ascii: 000034D9otalCount":1,"subReactionSummaries":[{"totalCount":1,"type":"upvote"}]},"reactionStatus":"on","commentSummary":{"totalCount":2,"subCommentSummaries":[{"totalCount":2,"type":"comment"}]},"commentStatus":"on","recoDocMetadata":null,"feed":{"feedNa
2025-01-10 15:23:03 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 65 77 73 22 2c 22 6c 61 73 74 46 72 65 41 63 74 69 6f 6e 54 69 6d 65 73 74 61 6d 70 22 3a 30 2c 22 66 65 65 64 43 6f 6d 70 6f 73 69 74 69 6f 6e 43 61 74 65 67 6f 72 79 22 3a 22 31 22 7d 2c 22 63 61 72 64 49 64 22 3a 32 37 2c 22 69 73 57 6f 72 6b 4e 65 77 73 43 6f 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 72 65 61 73 6f 6e 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6e 74 65 72 61 63 74 65 64 22 2c 22 72 61 6e 6b 22 3a 30 7d 5d 2c 22 72 69 22 3a 22 33 32 38 22 2c 22 72 65 63 6f 49 64 22 3a 22 31 73 62 4b 65 45 59 4e 4f 4f 59 76 6b 69 70 48 36 6d 70 4a 50 79 57 64 41 6d 22 2c 22 73 6f 75 72 63 65 22 3a 22 6d 73 6e 22 7d 5d 7d 2c 7b 22 64 61 74 61 54 65 6d 70 6c 61 74 65 22 3a 22 34 63 32 72 2d 36 63 61 72 64 73 2d 74 32 22 2c Data Ascii: 00004000news","lastFreActionTimestamp":0,"feedCompositionCategory":"1"},"cardId":27,"isWorkNewsContent":false,"reasons":[{"type":"interacted","rank":0}],"ri":"328","recoId":"1sbKeEYNOOYvkipH6mpJPyWdAm","source":"msn"}]},{"dataTemplate":"4c2r-6cards-t2",
2025-01-10 15:23:03 UTC	12	IN	Data Raw: 63 6f 6d 2f 6e 2f 32 37 32 30 0d 0a Data Ascii: com/n/2720
2025-01-10 15:23:03 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 39 30 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 6d 73 6e 2e 63 6f 6d 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 64 69 73 70 6c 61 79 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 72 65 66 65 72 72 61 6c 5f 64 65 73 63 72 69 70 74 69 6f 6e 26 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 37 39 36 34 37 31 5c 22 3e 20 c3 9c 62 65 72 2d 20 75 6e 64 20 75 6e 74 65 72 73 63 68 c3 a4 74 7a 74 65 20 41 74 74 72 61 6b 74 69 6f 6e 65 6e 20 69 6e 20 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 3c 2f 61 3e 3c 2f 70 3e 22 2c 22 66 6f 63 61 6c 52 65 67 69 6f 6e 22 3a 7b 22 78 31 22 3a 38 33 38 2c 22 78 32 22 3a 31 30 35 30 2c 22 79 31 22 3a 32 36 38 2c 22 79 32 22 3a 34 38 30 7d 2c 22 73 6f 75 72 63 65 22 3a 22 6d 73 6e 22 7d 7d 5d 2c 22 70 75 62 6c 69 73 68 65 64 44 61 Data Ascii: 0000400090?utm_source=msn.com&utm_medium=display&utm_campaign=referral_description&utm_content=796471\"> ber- und unterschtzte Attraktionen in New York City</a></p>","focalRegion":{"x1":838,"x2":1050,"y1":268,"y2":480},"source":"msn"}}],"publishedDa
2025-01-10 15:23:03 UTC	12	IN	Data Raw: 75 6e 64 20 75 6e 76 65 72 67 0d 0a Data Ascii: und unverg
2025-01-10 15:23:03 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 73 73 6c 69 63 68 65 20 45 72 69 6e 6e 65 72 75 6e 67 65 6e 20 6d 69 74 20 46 72 65 75 6e 64 69 6e 6e 65 6e 20 7a 75 20 73 63 68 61 66 66 65 6e 2e 20 56 6f 6e 20 70 75 6c 73 69 65 72 65 6e 64 65 6e 20 53 74 c3 a4 64 74 65 6e 20 6d 69 74 20 65 6e 64 6c 6f 73 65 6e 20 53 68 6f 70 70 69 6e 67 6d c3 b6 67 6c 69 63 68 6b 65 69 74 65 6e 20 75 6e 64 20 4e 61 63 68 74 6c 65 62 65 6e 20 62 69 73 20 68 69 6e 20 7a 75 20 69 64 79 6c 6c 69 73 63 68 65 6e 20 53 74 72 c3 a4 6e 64 65 6e 20 75 6e 64 20 6b 75 6c 74 75 72 65 6c 6c 65 6e 20 48 6f 74 73 70 6f 74 73 20 e2 80 93 20 65 73 20 67 69 62 74 20 65 69 6e 65 6e 20 4f 72 74 20 66 c3 bc 72 20 6a 65 64 65 73 20 41 62 65 6e 74 65 75 65 72 2e 20 45 67 61 6c 2c 20 6f 62 20 65 75 72 65 20 47 Data Ascii: 00006000essliche Erinnerungen mit Freundinnen zu schaffen. Von pulsierenden Stdten mit endlosen Shoppingmglichkeiten und Nachtleben bis hin zu idyllischen Strnden und kulturellen Hotspots es gibt einen Ort fr jedes Abenteuer. Egal, ob eure G

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.24	59521	20.189.173.11	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:02 UTC	473	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1736522579611&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1 Accept-Encoding: gzip, deflate Content-Length: 2692 Content-Type: application/json; charset=UTF-8 Host: browser.events.data.msn.cn Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:02 UTC	2692	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 53 65 72 76 65 72 4c 6f 67 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 63 34 39 38 37 31 31 66 30 32 36 35 34 65 64 63 61 38 61 37 31 35 63 61 36 65 31 63 62 34 64 34 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 35 2d 30 31 2d 31 30 54 31 35 3a 32 32 3a 34 39 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 7b 22 70 72 6f 64 75 63 74 22 3a 22 65 6e 74 77 69 6e 64 6f 77 73 64 61 73 68 22 2c 22 61 70 70 54 79 70 65 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 6e 61 6d 65 22 3a 22 77 69 6e 70 32 62 61 63 6b 69 6e 67 61 70 70 22 2c 22 69 73 4d 6f 63 6b 45 6e 76 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 56 65 72 22 3a 22 35 32 34 2e 33 30 35 30 32 2e 33 30 2e 30 22 2c 22 Data Ascii: {"name":"MS.News.Web.ServerLog","iKey":"o:c498711f02654edca8a715ca6e1cb4d4","time":"2025-01-10T15:22:49Z","ver":"4.0","data":{"page":{"product":"entwindowsdash","appType":"winWidgets","name":"winp2backingapp","isMockEnv":false,"hostVer":"524.30502.30.0","

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.24	58978	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:03 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 31 35 0d 0a 4d 53 2d 43 56 3a 20 71 35 70 7a 45 7a 6c 35 39 30 6d 6b 42 54 65 64 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 32 63 39 33 66 35 61 61 66 36 61 63 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 315MS-CV: q5pzEzl590mkBTed.1Context: 6a2c93f5aaf6ac9
2025-01-10 15:23:03 UTC	260	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 32 32 36 33 31 2e 34 31 36 39 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 30 30 31 38 30 30 31 32 41 38 34 34 37 39 41 41 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.22631.4169</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>00180012A84479AA</deviceName><followRetry>true</followRetry></agent></con
2025-01-10 15:23:03 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 71 35 70 7a 45 7a 6c 35 39 30 6d 6b 42 54 65 64 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 32 63 39 33 66 35 61 61 66 36 61 63 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 53 76 57 2b 6c 34 6b 31 4c 4c 61 6b 59 45 42 52 71 67 2f 77 49 77 2f 34 61 54 74 66 75 68 67 30 4a 48 55 35 37 48 54 6a 57 44 4c 76 4e 55 74 4b 5a 41 68 59 48 6c 39 65 6f 38 4a 42 67 48 2b 65 63 66 71 2f 2b 72 41 2f 33 73 50 67 2f 7a 65 46 66 46 78 6c 6c 38 58 61 78 2b 76 50 37 77 55 6f 34 66 79 6a 4b 6b 65 43 5a 43 71 63 37 Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: q5pzEzl590mkBTed.2Context: 6a2c93f5aaf6ac9<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARSvW+l4k1LLakYEBRqg/wIw/4aTtfuhg0JHU57HTjWDLvNUtKZAhYHl9eo8JBgH+ecfq/+rA/3sPg/zeFfFxll8Xax+vP7wUo4fyjKkeCZCqc7
2025-01-10 15:23:03 UTC	223	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 39 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 71 35 70 7a 45 7a 6c 35 39 30 6d 6b 42 54 65 64 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 61 32 63 39 33 66 35 61 61 66 36 61 63 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044479 196MS-CV: q5pzEzl590mkBTed.3Context: 6a2c93f5aaf6ac9<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-10 15:23:03 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-10 15:23:03 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6c 67 32 30 33 71 61 67 2b 6b 43 52 78 70 67 53 6c 49 38 70 63 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: lg203qag+kCRxpgSlI8pcA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.24	58979	2.23.227.213	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:04 UTC	325	OUT	GET /weathermapdata/1/static/weather/Icons/MSIAWwA=/Condition/AAehR3S.png HTTP/1.1 Accept: / Accept-Language: en-CH,en-US;q=0.7,en;q=0.3 UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: assets.msn.com Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.24	58980	172.64.41.3	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:04 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-10 15:23:04 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 02 74 68 04 62 69 6e 67 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 58 00 0c 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: thbingcom)XT
2025-01-10 15:23:04 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Fri, 10 Jan 2025 15:23:04 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8ffdaa88cf404407-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:23:04 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 0c 00 00 00 01 02 74 68 04 62 69 6e 67 03 63 6f 6d 00 00 01 00 01 c0 0c 00 05 00 01 00 00 54 55 00 22 04 70 2d 74 68 04 62 69 6e 67 03 63 6f 6d 0e 74 72 61 66 66 69 63 6d 61 6e 61 67 65 72 03 6e 65 74 00 c0 29 00 05 00 01 00 00 00 31 00 16 02 74 68 04 62 69 6e 67 03 63 6f 6d 07 65 64 67 65 6b 65 79 c0 46 c0 57 00 05 00 01 00 00 01 21 00 19 06 65 38 36 33 30 33 04 64 73 63 78 0a 61 6b 61 6d 61 69 65 64 67 65 c0 46 c0 79 00 01 00 01 00 00 00 09 00 04 17 2b 55 1b c0 79 00 01 00 01 00 00 00 09 00 04 17 2b 55 18 c0 79 00 01 00 01 00 00 00 09 00 04 17 2b 55 12 c0 79 00 01 00 01 00 00 00 09 00 04 17 2b 55 1e c0 79 00 01 00 01 00 00 00 09 00 04 17 2b 55 1f c0 79 00 01 00 01 00 00 00 09 00 04 17 2b 55 16 c0 79 00 01 00 01 00 00 00 09 00 04 17 Data Ascii: thbingcomTU"p-thbingcomtrafficmanagernet)1thbingcomedgekeyFW!e86303dscxakamaiedgeFy+Uy+Uy+Uy+Uy+Uy+Uy

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.24	58982	172.64.41.3	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:04 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-10 15:23:04 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 07 77 69 6e 64 6f 77 73 03 6d 73 6e 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: windowsmsncom)TP
2025-01-10 15:23:04 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Fri, 10 Jan 2025 15:23:04 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8ffdaa8a9c9d433e-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:23:04 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 03 00 00 00 01 07 77 69 6e 64 6f 77 73 03 6d 73 6e 03 63 6f 6d 00 00 01 00 01 c0 0c 00 05 00 01 00 00 0d 72 00 21 0b 77 77 77 2d 6d 73 6e 2d 63 6f 6d 06 61 2d 30 30 30 33 08 61 2d 6d 73 65 64 67 65 03 6e 65 74 00 c0 2d 00 05 00 01 00 00 00 52 00 02 c0 39 c0 39 00 01 00 01 00 00 00 52 00 04 cc 4f c5 cb 00 00 29 04 d0 00 00 00 00 01 5d 00 0c 01 59 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: windowsmsncomr!www-msn-coma-0003a-msedgenet-R99RO)]Y

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.24	58981	172.64.41.3	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:04 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-10 15:23:04 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 0e 75 6e 69 76 65 72 73 61 6c 73 74 6f 72 65 09 73 74 72 65 61 6d 69 6e 67 0d 6d 65 64 69 61 73 65 72 76 69 63 65 73 07 77 69 6e 64 6f 77 73 03 6e 65 74 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 31 00 0c 00 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: universalstorestreamingmediaserviceswindowsnet)1-
2025-01-10 15:23:04 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Fri, 10 Jan 2025 15:23:04 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8ffdaa8a88d97c7b-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:23:04 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 04 00 00 00 01 0e 75 6e 69 76 65 72 73 61 6c 73 74 6f 72 65 09 73 74 72 65 61 6d 69 6e 67 0d 6d 65 64 69 61 73 65 72 76 69 63 65 73 07 77 69 6e 64 6f 77 73 03 6e 65 74 00 00 01 00 01 c0 0c 00 05 00 01 00 00 01 aa 00 2d 20 63 39 33 37 31 66 36 36 30 34 63 37 34 63 36 32 62 35 63 63 39 36 33 33 35 37 34 33 64 32 66 66 09 61 7a 75 72 65 65 64 67 65 c0 3b c0 50 00 05 00 01 00 00 05 2e 00 26 20 63 39 33 37 31 66 36 36 30 34 63 37 34 63 36 32 62 35 63 63 39 36 33 33 35 37 34 33 64 32 66 66 02 65 63 c0 71 c0 89 00 05 00 01 00 00 0c 36 00 10 03 63 73 39 03 77 70 63 05 76 30 63 64 6e c0 3b c0 bb 00 01 00 01 00 00 0c 36 00 04 48 15 51 c8 00 00 29 04 d0 00 00 00 00 00 ee 00 0c 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: universalstorestreamingmediaserviceswindowsnet- c9371f6604c74c62b5cc96335743d2ffazureedge;P.& c9371f6604c74c62b5cc96335743d2ffecq6cs9wpcv0cdn;6HQ)

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.24	58983	172.64.41.3	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:04 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-10 15:23:04 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 0d 69 6d 67 2d 73 2d 6d 73 6e 2d 63 6f 6d 09 61 6b 61 6d 61 69 7a 65 64 03 6e 65 74 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 48 00 0c 00 44 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: img-s-msn-comakamaizednet)HD

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.24	58984	172.64.41.3	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:04 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-10 15:23:04 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 06 61 73 73 65 74 73 03 6d 73 6e 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 55 00 0c 00 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: assetsmsncom)UQ

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.24	59003	2.23.227.213	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:05 UTC	741	OUT	GET /staticsb/statics/latest/icons-wc/icons/TrendingLight.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: 0x8DD160B390F1D29

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.24	59002	2.23.227.213	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:05 UTC	845	OUT	GET /weathermapdata/1/static/weather/Icons/taskbar_v10/tempdrop1.svg HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; MUIDB=14EA2E828C4D639509943BD28D2B6272; USRLOC=

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.24	58999	2.23.227.213	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:05 UTC	748	OUT	OPTIONS /service/Finance/Charts?apikey=AEbyVYqTQAPvg4lWwMSFHaLkDzl3weRKKIDDInLQUj&activityId=6DC81999-FF19-4FB6-8C33-24AC9D40F8F3&ocid=winp2&cm=de-ch&it=app&scn=APP_ANON&ids=an8tqh,an8uec,an9l4c,avyt7w,awdk1h&type=1D1M&wrapodata=false&chartflag=7 HTTP/1.1 Host: assets.msn.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: muid Origin: https://windows.msn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:05 UTC	2419	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2 Expires: Fri, 10 Jan 2025 15:23:05 GMT Date: Fri, 10 Jan 2025 15:23:05 GMT Connection: close Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=2.20.196.216,b=3633320584,c=g,n=DE_HE_FRANKFURT,o=20940] Server-Timing: clientrtt; dur=86, clienttt; dur=0, origin; dur=, cdntime; dur=0, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: NotCacheable from child Access-Control-Max-Age: 300 Akamai-Server-IP: 2.20.196.216 Akamai-Request-ID: d8901288 Access-Control-Expose-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,X-Statics-Fallback,X-FD-RevIP,X-FD-ClientIP,s-xbox-token,X-Client-Data,x-fd-features,cache-control,pragma,traceparent,Widgets,Muted,OneSvc-Uni-Feat-Tun,appUninstall,Velocity,SoftLanding,PrefMigrated,DDD-TMPL-Removed,deviceFeatures,Akamai-Request-BC Access-Control-Allow-Headers: TicketType,RequestContinuationKey,AuthToken,Content-Type,x-client-activityid,ms-cv,signedInCookieName,muid,appid,User-Location,user-location,userauthtoken,usertickettype,sitename,s2sauthtoken,thumbprint,Authorization,Ent-Authorization,UserIdToken,DDD-TMPL,DDD-ActivityId,DDD-FeatureSet,DDD-Session-ID,Date,date,ads-referer,taboola-sessionId,taboola-sessionid,Akamai-Request-ID,Akamai-Server-IP,X-MSEdge-Ref,DDD-DebugId,X-Statics-Fallback,X-FD-RevIP,X-FD-ClientIP,s-xbox-token,X-Client-Data,x-fd-features,cache-control,pragma,traceparent,Widgets,Muted,OneSvc-Uni-Feat-Tun,appUninstall,Velocity,SoftLanding,PrefMigrated,DDD-TMPL-Removed,deviceFeatures Access-Control-Allow-Methods: PUT,PATCH,POST,GET,OPTIONS,DELETE Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com X-AS-SuppressSetCookie: 1 Cache-Control: public, max-age=60 report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.d8c41402.1736522585.d8901288 Vary: Origin
2025-01-10 15:23:05 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.24	59011	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:06 UTC	662	OUT	GET /bundles/v1/winWidgets/latest/vendors.b540f4f9497b6ced4cf6.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:06 UTC	1237	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 10fwIz58S9rs+YrODYzKVQ== Last-Modified: Tue, 07 Jan 2025 15:57:39 GMT ETag: 0x8DD2F340344CFBF Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 85873ec6-d01e-00bc-1f1d-616dbc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:06 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.37,b=8398216,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.37 Akamai-Request-ID: 802588 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.25be1cb8.1736522586.802588 Vary: Origin
2025-01-10 15:23:06 UTC	15147	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 65 6e 64 6f 72 73 2e 62 35 34 30 66 34 66 39 34 39 37 62 36 63 65 64 34 63 66 36 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 73 22 5d 2c 7b 37 33 30 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 74 2e 65 78 70 6f 72 74 73 3d 65 2c 74 2e 65 78 70 6f 72 74 73 2e 48 74 74 70 73 41 Data Ascii: 00006000/! For license information please see vendors.b540f4f9497b6ced4cf6.js.LICENSE.txt /(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["vendors"],{73040:function(t){function e(){}t.exports=e,t.exports.HttpsA
2025-01-10 15:23:06 UTC	9441	IN	Data Raw: 65 77 20 44 61 74 65 28 30 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 3e 3d 30 26 26 65 3c 3d 31 31 26 26 72 3e 3d 31 26 26 72 3c 3d 28 70 5b 65 5d 7c 7c 28 76 28 74 29 3f 32 39 3a 32 38 29 29 7d 28 65 2c 69 2c 75 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3e 3d 31 26 26 65 3c 3d 28 76 28 74 29 3f 33 36 36 3a 33 36 35 29 7d 28 65 2c 6f 29 3f 28 6c 2e 73 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 65 2c 69 2c 4d 61 74 68 2e 6d 61 78 28 6f 2c 75 29 29 2c 6c 29 3a 6e 65 77 20 44 61 74 65 28 4e 61 4e 29 7d 28 67 2e 72 65 73 74 44 61 74 65 53 74 72 69 6e 67 2c 67 2e 79 65 61 72 29 7d 69 66 28 21 68 7c 7c 69 73 4e 61 4e 28 68 2e 67 65 74 54 69 6d 65 28 29 29 29 72 65 74 75 72 Data Ascii: ew Date(0);return function(t,e,r){return e>=0&&e<=11&&r>=1&&r<=(p[e]\|\|(v(t)?29:28))}(e,i,u)&&function(t,e){return e>=1&&e<=(v(t)?366:365)}(e,o)?(l.setUTCFullYear(e,i,Math.max(o,u)),l):new Date(NaN)}(g.restDateString,g.year)}if(!h\|\|isNaN(h.getTime()))retur
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 73 74 6f 72 65 22 29 3b 76 61 72 20 72 3d 74 2b 22 53 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 6e 2e 5a 29 28 75 2c 65 29 3b 76 61 72 20 69 3d 75 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 75 28 72 2c 6e 29 7b 76 61 72 20 6f 3b 72 65 74 75 72 6e 28 6f 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 6e 29 7c 7c 74 68 69 73 29 5b 74 5d 3d 72 2e 73 74 6f 72 65 2c 6f 7d 72 65 74 75 72 6e 20 69 2e 67 65 74 43 68 69 6c 64 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 65 3d 7b 7d 29 5b 74 5d 3d 74 68 69 73 5b 74 5d 2c 65 5b 72 5d 3d Data Ascii: 00006000tion(t){var e;void 0===t&&(t="store");var r=t+"Subscription",i=function(e){(0,n.Z)(u,e);var i=u.prototype;function u(r,n){var o;return(o=e.call(this,r,n)\|\|this)[t]=r.store,o}return i.getChildContext=function(){var e;return(e={})[t]=this[t],e[r]=
2025-01-10 15:23:06 UTC	8204	IN	Data Raw: 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 21 63 28 65 29 3f 69 28 7b 7d 2c 65 2c 7b 74 79 70 65 3a 74 2b 22 2f 22 2b 65 2e 74 79 70 65 7d 29 3a 65 7d 7d 28 65 29 28 72 29 29 7d 7d 7d 7d 2c 73 28 72 2c 76 29 29 29 3b 76 61 72 20 72 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 7b 7d 2c 74 28 65 29 2c 7b 72 6f 6f 74 53 74 6f 72 65 3a 65 2e 72 6f 6f 74 53 74 6f 72 65 7c 7c 65 7d 29 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 21 74 7c 7c 63 28 65 29 3f 72 28 65 29 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e Data Ascii: (t){return function(e){return t&&!c(e)?i({},e,{type:t+"/"+e.type}):e}}(e)(r))}}}},s(r,v)));var r},d=function(t){return function(e){return i({},t(e),{rootStore:e.rootStore\|\|e})}},g=function(t){return function(e,r,n){return!t\|\|c(e)?r(e):function(t,e){return
2025-01-10 15:23:06 UTC	2577	IN	Data Raw: 30 30 30 30 30 41 30 35 0d 0a 4e 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 29 7c 7c 6e 2e 6c 65 6e 67 74 68 3c 3d 33 29 62 72 65 61 6b 3b 76 61 72 20 6f 3d 6e 2e 73 70 6c 69 74 28 2f 5b 5e 30 2d 39 5d 2b 2f 67 29 2c 69 3d 6f 3b 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 69 3d 5b 74 2e 6a 6f 69 6e 2e 61 70 70 6c 79 28 74 2c 5b 22 22 5d 2e 63 6f 6e 63 61 74 28 6f 2e 73 70 6c 69 63 65 28 30 2c 6f 2e 6c 65 6e 67 74 68 2d 31 29 29 29 2c 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d 5d 29 3b 76 61 72 20 75 3d 69 5b 30 5d 2c 63 3d 75 2e 6c 65 6e 67 74 68 25 33 2c 61 3d 63 3e 30 3f 75 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 63 29 3a 74 2e 45 6d 70 74 79 2c 73 3d 75 2e 73 75 62 73 74 72 69 6e 67 28 63 29 2e 6d 61 74 63 68 28 2f 2e 7b 33 7d 2f 67 29 3b 72 65 74 75 72 6e 28 61 Data Ascii: 00000A05N(parseFloat(n))\|\|n.length<=3)break;var o=n.split(/[^0-9]+/g),i=o;o.length>1&&(i=[t.join.apply(t,[""].concat(o.splice(0,o.length-1))),o[o.length-1]]);var u=i[0],c=u.length%3,a=c>0?u.substring(0,c):t.Empty,s=u.substring(c).match(/.{3}/g);return(a
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 63 75 6c 61 72 5d 22 7d 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 74 7d 7d 29 29 2c 63 3d 6e 5b 72 5d 3b 72 3c 6f 3b 63 3d 6e 5b 2b 2b 72 5d 29 67 28 63 29 7c 7c 21 77 28 63 29 3f 75 2b 3d 22 20 22 2b 63 3a 75 2b 3d 22 20 22 2b 61 28 63 29 3b 72 65 74 75 72 6e 20 75 7d 2c 65 2e 64 65 70 72 65 63 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 26 26 21 30 3d 3d 3d 6e 2e 6e 6f 44 65 70 72 65 63 61 74 69 6f 6e 29 72 65 74 75 72 6e 20 74 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 70 72 65 63 61 74 65 28 74 2c 72 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 76 61 72 Data Ascii: 00004000cular]"}default:return t}})),c=n[r];r<o;c=n[++r])g(c)\|\|!w(c)?u+=" "+c:u+=" "+a(c);return u},e.deprecate=function(t,r){if(void 0!==n&&!0===n.noDeprecation)return t;if(void 0===n)return function(){return e.deprecate(t,r).apply(this,arguments)};var
2025-01-10 15:23:06 UTC	12	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 2c 65 0d 0a Data Ascii: nction(t,e
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 72 29 7b 73 77 69 74 63 68 28 72 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 2c 72 5b 30 5d 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 2c 72 5b 30 5d 2c 72 5b 31 5d 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 2c 72 5b 30 5d 2c 72 5b 31 5d 2c 72 5b 32 5d 29 7d 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 65 2c 72 29 7d 7d 2c 36 36 36 36 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 2d 31 2c 6e 3d 6e 75 6c 6c 3d 3d 74 3f 30 3a Data Ascii: 00004000,r){switch(r.length){case 0:return t.call(e);case 1:return t.call(e,r[0]);case 2:return t.call(e,r[0],r[1]);case 3:return t.call(e,r[0],r[1],r[2])}return t.apply(e,r)}},66662:function(t,e){"use strict";e.Z=function(t,e){for(var r=-1,n=null==t?0:
2025-01-10 15:23:06 UTC	12	IN	Data Raw: 72 65 74 75 72 6e 20 6e 65 77 0d 0a Data Ascii: return new
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 63 2e 5a 28 74 29 7d 3a 61 2e 5a 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 63 3d 2d 31 2c 61 3d 6f 2e 5a 2c 6c 3d 74 2e 6c 65 6e 67 74 68 2c 70 3d 21 30 2c 76 3d 5b 5d 2c 68 3d 76 3b 69 66 28 72 29 70 3d 21 31 2c 61 3d 69 2e 5a 3b 65 6c 73 65 20 69 66 28 6c 3e 3d 32 30 30 29 7b 76 61 72 20 64 3d 65 3f 6e 75 6c 6c 3a 66 28 74 29 3b 69 66 28 64 29 72 65 74 75 72 6e 28 30 2c 73 2e 5a 29 28 64 29 3b 70 3d 21 31 2c 61 3d 75 2e 5a 2c 68 3d 6e 65 77 20 6e 2e 5a 7d 65 6c 73 65 20 68 3d 65 3f 5b 5d 3a 76 3b 74 3a 66 6f 72 28 3b 2b 2b 63 3c 6c 3b 29 7b 76 61 72 20 67 3d 74 5b 63 5d 2c 79 3d 65 3f 65 28 67 29 3a 67 3b 69 66 28 67 3d 72 7c 7c 30 21 3d 3d 67 3f 67 3a 30 2c 70 26 26 79 3d 3d 79 29 Data Ascii: 00004000 c.Z(t)}:a.Z;var l=function(t,e,r){var c=-1,a=o.Z,l=t.length,p=!0,v=[],h=v;if(r)p=!1,a=i.Z;else if(l>=200){var d=e?null:f(t);if(d)return(0,s.Z)(d);p=!1,a=u.Z,h=new n.Z}else h=e?[]:v;t:for(;++c<l;){var g=t[c],y=e?e(g):g;if(g=r\|\|0!==g?g:0,p&&y==y)

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.24	59012	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:06 UTC	664	OUT	GET /bundles/v1/winWidgets/latest/microsoft.5503fd0abb68caa4c2f5.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:06 UTC	1245	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: dZkS3nJo4xngxv+edzD0JA== Last-Modified: Thu, 09 Jan 2025 14:24:24 GMT ETag: 0x8DD30B9512DE7AC Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: ec1a16f7-001e-00f0-77d1-621cee000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:06 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.36,b=379804549,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=1, clienttt; dur=23, origin; dur=0, cdntime; dur=23, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.36 Akamai-Request-ID: 16a35b85 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.24be1cb8.1736522586.16a35b85 Vary: Origin
2025-01-10 15:23:06 UTC	15139	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 69 63 72 6f 73 6f 66 74 2e 35 35 30 33 66 64 30 61 62 62 36 38 63 61 61 34 63 32 66 35 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 69 63 72 6f 73 6f 66 74 22 5d 2c 7b 36 33 31 36 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: 00006000/! For license information please see microsoft.5503fd0abb68caa4c2f5.js.LICENSE.txt /(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["microsoft"],{63165:function(t,e,n){"use strict";n.d(e,{Z:function(){r
2025-01-10 15:23:06 UTC	9449	IN	Data Raw: 6f 2e 4d 72 2c 6f 2e 58 7a 2c 6f 2e 46 59 2c 6f 2e 59 36 2c 72 2e 62 24 2c 6f 2e 48 44 2c 6f 2e 68 6a 2c 6f 2e 6a 6e 2c 6f 2e 6d 66 2c 6f 2e 6b 4a 2c 6f 2e 4b 6e 2c 6f 2e 6e 64 2c 72 2e 4d 46 2c 6f 2e 59 36 2c 72 2e 63 70 2c 73 2e 70 37 2c 73 2e 55 59 2c 6f 2e 6c 5f 2c 63 2e 63 39 2c 63 2e 49 62 2c 6f 2e 49 64 2c 6f 2e 72 57 2c 6f 2e 59 6d 2c 6f 2e 6f 38 2c 6f 2e 6c 65 2c 6f 2e 6e 72 2c 6f 2e 6d 66 2c 6f 2e 4b 6e 2c 6f 2e 4a 5f 2c 6f 2e 6b 4a 2c 6f 2e 56 5a 2c 6f 2e 48 44 2c 6f 2e 68 6a 2c 6f 2e 6a 6e 2c 6f 2e 59 36 2c 6f 2e 74 4f 2c 6f 2e 55 41 2c 6f 2e 4d 72 2c 6f 2e 58 7a 2c 6f 2e 6e 64 2c 64 2e 70 75 2c 6f 2e 46 59 2c 6f 2e 6c 5f 2c 63 2e 49 62 2c 6f 2e 6d 36 2c 72 2e 77 31 2c 61 2e 47 57 2c 61 2e 4a 6a 2c 75 2e 70 5a 2c 75 2e 61 7a 2c 75 2e 5f 6c 2c Data Ascii: o.Mr,o.Xz,o.FY,o.Y6,r.b$,o.HD,o.hj,o.jn,o.mf,o.kJ,o.Kn,o.nd,r.MF,o.Y6,r.cp,s.p7,s.UY,o.l_,c.c9,c.Ib,o.Id,o.rW,o.Ym,o.o8,o.le,o.nr,o.mf,o.Kn,o.J_,o.kJ,o.VZ,o.HD,o.hj,o.jn,o.Y6,o.tO,o.UA,o.Mr,o.Xz,o.nd,d.pu,o.FY,o.l_,c.Ib,o.m6,r.w1,a.GW,a.Jj,u.pZ,u.az,u._l,
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 73 2c 21 31 29 3b 74 2e 71 75 65 75 65 5b 72 2e 4d 57 5d 28 61 29 2c 31 3d 3d 3d 65 3f 74 5b 6c 2e 79 73 5d 28 73 29 3a 74 5b 6c 2e 63 4c 5d 28 73 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 6e 29 7b 76 61 72 20 69 3d 28 30 2c 6f 2e 6a 29 28 65 7c 7c 7b 7d 29 3b 69 26 26 69 5b 72 2e 6d 63 5d 26 26 69 5b 72 2e 6d 63 5d 28 74 2c 6e 29 7d 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 3d 28 30 2c 61 2e 76 34 29 28 74 2e 6c 6f 67 67 69 6e 67 4c 65 76 65 6c 43 6f 6e 73 6f 6c 65 2c 30 29 2c 63 3d 28 30 2c 61 2e 76 34 29 28 74 2e 6c 6f 67 67 69 6e 67 4c 65 76 65 6c 54 65 6c 65 6d 65 74 72 79 2c 31 29 2c 68 3d 28 30 2c 61 2e 76 34 29 28 74 2e 6d 61 78 4d 65 73 73 61 67 65 4c 69 6d 69 74 2c 32 35 29 2c 70 3d 28 30 2c 61 2e 76 34 29 Data Ascii: 00006000s,!1);t.queue[r.MW](a),1===e?t[l.ys](s):t[l.cL](s)}}}function v(t,n){var i=(0,o.j)(e\|\|{});i&&i[r.mc]&&i[r.mc](t,n)}!function(t){n=(0,a.v4)(t.loggingLevelConsole,0),c=(0,a.v4)(t.loggingLevelTelemetry,1),h=(0,a.v4)(t.maxMessageLimit,25),p=(0,a.v4)
2025-01-10 15:23:06 UTC	8204	IN	Data Raw: 72 6e 20 61 5b 69 2e 75 4c 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6f 2e 5f 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 75 6e 6c 6f 61 64 28 61 2c 74 29 2c 21 65 7d 2c 61 5b 69 2e 7a 56 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 6e 75 6c 6c 29 2c 28 30 2c 73 2e 6b 4a 29 28 74 29 26 26 28 74 3d 62 28 74 2c 72 2c 65 2c 6e 29 29 2c 76 28 74 7c 7c 61 5b 69 2e 57 32 5d 28 29 2c 65 2c 6e 29 7d 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 65 5b 69 2e 54 43 5d 7c 7c 7b 7d 2c 6f 3d 66 28 74 2c 72 2c 65 2c 6e 29 2e 63 74 78 3b 72 65 74 75 72 6e 20 6f 5b 69 2e 75 4c 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: rn a[i.uL]=function(t){var e=o._next();return e&&e.unload(a,t),!e},a[i.zV]=function(t,n){return void 0===t&&(t=null),(0,s.kJ)(t)&&(t=b(t,r,e,n)),v(t\|\|a[i.W2](),e,n)},a}function m(t,e,n){var r=e[i.TC]\|\|{},o=f(t,r,e,n).ctx;return o[i.uL]=function(t){return
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 2c 6e 29 7d 2c 74 7d 28 29 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 21 30 2c 6e 3d 21 30 2c 69 3d 21 30 2c 6f 3d 22 75 73 65 2d 63 6f 6c 6c 65 63 74 6f 72 2d 64 65 6c 74 61 22 2c 73 3d 21 31 3b 28 30 2c 72 2e 5a 29 28 74 2c 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 2c 74 2e 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 26 26 28 69 3d 21 31 2c 73 7c 7c 28 65 3d 21 31 29 29 7d 2c 74 2e 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 00004000e,n)},t}(),_=function(){function t(){var e=!0,n=!0,i=!0,o="use-collector-delta",s=!1;(0,r.Z)(t,this,(function(t){t.allowRequestSending=function(){return e},t.firstRequestSent=function(){i&&(i=!1,s\|\|(e=!1))},t.shouldAddClockSkewHeaders=function()
2025-01-10 15:23:06 UTC	12	IN	Data Raw: 29 3f 41 3d 58 28 28 66 75 6e 0d 0a Data Ascii: )?A=X((fun
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 63 74 69 6f 6e 28 29 7b 41 3d 6e 75 6c 6c 2c 5a 28 30 3d 3d 3d 50 3f 33 3a 31 2c 30 2c 31 29 2c 50 2b 2b 2c 50 25 3d 32 2c 4b 28 29 7d 29 2c 65 29 3a 50 3d 30 29 7d 66 75 6e 63 74 69 6f 6e 20 51 28 29 7b 6e 3d 6e 75 6c 6c 2c 78 3d 21 31 2c 43 3d 5b 5d 2c 6b 3d 6e 75 6c 6c 2c 24 3d 21 31 2c 53 3d 30 2c 54 3d 35 30 30 2c 4c 3d 30 2c 4f 3d 31 65 34 2c 44 3d 7b 7d 2c 49 3d 66 2c 41 3d 6e 75 6c 6c 2c 48 3d 6e 75 6c 6c 2c 52 3d 30 2c 50 3d 30 2c 70 3d 6e 75 6c 6c 2c 4d 3d 7b 7d 2c 76 3d 76 6f 69 64 20 30 2c 6d 3d 30 2c 5f 3d 2d 31 2c 62 3d 6e 75 6c 6c 2c 4e 3d 21 30 2c 6a 3d 21 31 2c 71 3d 36 2c 55 3d 32 2c 79 3d 6e 75 6c 6c 2c 77 3d 64 74 28 29 2c 67 3d 6e 65 77 20 6c 74 28 35 30 30 2c 32 2c 31 2c 7b 72 65 71 75 65 75 65 3a 63 74 Data Ascii: 00004000ction(){A=null,Z(0===P?3:1,0,1),P++,P%=2,K()}),e):P=0)}function Q(){n=null,x=!1,C=[],k=null,$=!1,S=0,T=500,L=0,O=1e4,D={},I=f,A=null,H=null,R=0,P=0,p=null,M={},v=void 0,m=0,_=-1,b=null,N=!0,j=!1,q=6,U=2,y=null,w=dt(),g=new lt(500,2,1,{requeue:ct
2025-01-10 15:23:06 UTC	12	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 0d 0a Data Ascii: =function(
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 29 7b 61 3d 74 7d 7d 29 29 7d 72 65 74 75 72 6e 20 74 2e 63 6f 6f 6b 69 65 53 65 70 61 72 61 74 6f 72 3d 22 7c 22 2c 74 2e 75 73 65 72 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 61 69 5f 75 73 65 72 22 2c 74 2e 5f 73 74 61 74 69 63 49 6e 69 74 3d 76 6f 69 64 28 30 2c 73 2e 6c 5f 29 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6c 6f 63 61 6c 49 64 22 2c 49 74 2c 41 74 29 2c 74 7d 28 29 2c 48 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 65 2e 70 6f 70 53 61 6d 70 6c 65 3d 31 30 30 2c 65 2e 65 76 65 6e 74 46 6c 61 67 73 3d 30 2c 74 2e 68 61 73 68 49 64 65 6e 74 69 66 69 65 72 73 26 26 28 65 2e 65 76 65 6e 74 46 6c 61 67 73 3d 31 30 34 38 35 37 36 7c 65 2e 65 76 65 6e 74 46 6c 61 67 73 29 2c 74 2e 64 72 6f Data Ascii: 00004000t){a=t}}))}return t.cookieSeparator="\|",t.userCookieName="ai_user",t._staticInit=void(0,s.l_)(t.prototype,"localId",It,At),t}(),Ht=function(t){var e=this;e.popSample=100,e.eventFlags=0,t.hashIdentifiers&&(e.eventFlags=1048576\|e.eventFlags),t.dro
2025-01-10 15:23:06 UTC	12	IN	Data Raw: 6e 73 74 20 67 3d 28 74 2c 65 0d 0a Data Ascii: nst g=(t,e

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.24	59009	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:06 UTC	661	OUT	GET /bundles/v1/winWidgets/latest/common.c9e5ca54f8fe5dc7fd57.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:06 UTC	1245	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: rCodNLHeiqZIykC8l8RmYA== Last-Modified: Thu, 09 Jan 2025 14:24:25 GMT ETag: 0x8DD30B951EFE94D Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 0fd58d52-c01e-008f-4ca2-623217000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:06 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.39,b=740480843,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=12, origin; dur=0, cdntime; dur=12, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.39 Akamai-Request-ID: 2c22d74b Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.27be1cb8.1736522586.2c22d74b Vary: Origin
2025-01-10 15:23:06 UTC	15139	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 22 5d 2c 7b 36 37 37 30 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 63 6f 6e 73 74 20 69 3d 7b 5f 39 30 78 39 30 3a 7b 77 69 64 74 68 3a 39 30 2c 68 65 69 67 68 74 3a 39 30 7d 2c 5f 32 36 38 78 39 34 3a 7b 77 69 64 74 68 3a 32 36 38 2c 68 65 69 67 68 74 3a 39 34 7d 2c 5f 32 36 38 78 31 34 30 3a 7b 77 69 64 Data Ascii: 00006000"use strict";(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["common"],{67700:function(e,t,n){n.d(t,{u:function(){return i}});const i={_90x90:{width:90,height:90},_268x94:{width:268,height:94},_268x140:{wid
2025-01-10 15:23:06 UTC	9449	IN	Data Raw: 72 6f 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 76 68 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 68 65 61 64 69 6e 67 2d 67 72 6f 75 70 2d 65 72 72 6f 72 2e 76 65 72 74 69 63 61 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 30 70 78 7d 2e 68 65 61 64 69 6e 67 2d 67 72 6f 75 70 2d 65 72 72 6f 72 2e 74 72 61 6e 73 6c 75 63 65 6e 74 2d 77 68 69 74 65 7b 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 7d 2e 69 73 4d 6f 62 69 6c 65 20 2e 68 65 61 64 69 6e 67 2d 67 72 6f 75 70 2d 65 72 72 6f 72 2d 69 63 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 46 20 50 72 6f 20 44 69 73 70 6c 61 79 27 Data Ascii: ror{align-items:center;display:flex;flex-direction:column;margin-top:10vh;text-align:center}.heading-group-error.vertical{margin-top:80px}.heading-group-error.translucent-white{color:#f5f5f5}.isMobile .heading-group-error-icon{font-family:'SF Pro Display'
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 31 35 36 29 2c 64 3d 6e 28 38 32 32 36 30 29 2c 6c 3d 6e 28 39 35 32 38 33 29 2c 75 3d 6e 28 35 31 32 39 33 29 2c 70 3d 6e 28 34 34 32 32 35 29 2c 67 3d 6e 28 31 36 37 35 34 29 2c 68 3d 6e 28 39 33 35 37 30 29 2c 66 3d 6e 28 35 37 32 31 37 29 2c 6d 3d 6e 28 32 32 30 30 32 29 2c 79 3d 6e 28 39 39 36 36 39 29 2c 62 3d 6e 28 31 35 35 34 36 29 2c 76 3d 6e 28 38 30 34 30 36 29 2c 43 3d 6e 28 34 35 33 33 30 29 2c 77 3d 6e 28 38 36 31 30 39 29 2c 53 3d 6e 28 39 37 35 34 35 29 2c 54 3d 6e 28 37 38 32 35 34 29 2c 6b 3d 6e 28 32 33 35 34 39 29 2c 41 3d 6e 28 38 32 38 39 38 29 2c 50 3d 6e 28 31 30 37 35 34 29 2c 49 3d 6e 28 37 34 37 36 29 2c 78 3d 6e 28 39 30 32 31 35 29 2c 4d 3d 6e 28 38 38 38 32 36 29 2c 45 3d 6e 28 32 31 39 33 30 29 Data Ascii: 00006000156),d=n(82260),l=n(95283),u=n(51293),p=n(44225),g=n(16754),h=n(93570),f=n(57217),m=n(22002),y=n(99669),b=n(15546),v=n(80406),C=n(45330),w=n(86109),S=n(97545),T=n(78254),k=n(23549),A=n(82898),P=n(10754),I=n(7476),x=n(90215),M=n(88826),E=n(21930)
2025-01-10 15:23:06 UTC	8204	IN	Data Raw: 67 72 65 65 74 69 6e 67 73 2d 70 72 65 74 65 78 74 2d 77 69 74 68 2d 69 63 6f 6e 20 2e 65 76 65 6e 74 2d 69 63 6f 6e 2d 73 6d 61 6c 6c 7b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 34 70 78 7d 2e 68 65 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2e 72 61 69 6c 2d 67 72 65 65 74 69 6e 67 73 20 2e 67 72 65 65 74 69 6e 67 73 2d 70 72 65 74 65 78 74 2d 77 69 74 68 2d 69 63 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 24 7b 4b 2e 58 69 7d 7d 2e 65 76 65 6e 74 2d 69 63 6f 6e 2d 73 6d 61 6c 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 65 78 74 2d 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 32 32 70 78 3b 68 65 69 67 68 74 3a 32 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a Data Ascii: greetings-pretext-with-icon .event-icon-small{right:0;bottom:4px}.header-container.rail-greetings .greetings-pretext-with-icon:hover{background:${K.Xi}}.event-icon-small{display:inline-block;vertical-align:text-bottom;width:22px;height:22px;margin-bottom:
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 61 74 75 73 2e 6c 61 73 74 53 68 6f 77 6e 54 69 6d 65 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 28 30 2c 24 2e 24 6f 29 28 29 2e 73 65 74 49 74 65 6d 28 74 68 69 73 2e 62 61 63 6b 69 6e 67 41 70 70 55 70 64 61 74 65 42 61 6e 6e 65 72 4b 65 79 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 2e 62 61 63 6b 69 6e 67 41 70 70 42 61 6e 6e 65 72 53 74 61 74 75 73 29 29 29 3a 74 3d 3d 3d 6b 65 2e 4e 65 77 73 4e 6f 74 69 66 63 61 74 69 6f 6e 26 26 74 68 69 73 2e 63 75 72 72 65 6e 74 53 68 6f 77 6e 42 61 6e 6e 65 72 49 6e 66 6f 26 26 28 30 2c 41 65 2e 65 67 29 28 7b 6e 6f 74 69 66 69 63 61 74 69 6f 6e 54 79 70 65 3a 74 68 69 73 2e 63 75 72 72 65 6e 74 53 68 6f 77 6e 42 61 6e 6e 65 72 49 6e 66 6f 2e 62 61 6e 6e 65 72 4f 70 74 Data Ascii: 00004000tatus.lastShownTime=Date.now(),(0,$.$o)().setItem(this.backingAppUpdateBannerKey,JSON.stringify(this.backingAppBannerStatus))):t===ke.NewsNotifcation&&this.currentShownBannerInfo&&(0,Ae.eg)({notificationType:this.currentShownBannerInfo.bannerOpt
2025-01-10 15:23:06 UTC	12	IN	Data Raw: 4d 30 2e 73 65 6e 64 41 70 70 0d 0a Data Ascii: M0.sendApp
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 45 72 72 6f 72 45 76 65 6e 74 28 7b 2e 2e 2e 49 2e 64 51 62 2c 6d 65 73 73 61 67 65 3a 60 45 72 72 6f 72 20 77 68 65 6e 20 6c 6f 61 64 69 6e 67 20 74 6f 70 20 6e 61 76 20 63 6f 6e 66 69 67 3a 20 24 7b 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 65 2e 6d 65 73 73 61 67 65 3a 65 7d 60 2c 70 62 3a 7b 2e 2e 2e 49 2e 64 51 62 2c 74 6f 70 4e 61 76 43 61 6e 64 69 64 61 74 65 4f 70 74 69 6f 6e 73 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 6f 70 4e 61 76 43 61 6e 64 69 64 61 74 65 4f 70 74 69 6f 6e 73 2c 74 6f 70 4e 61 76 50 69 76 6f 74 73 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 6f 70 4e 61 76 50 69 76 6f 74 73 7d 7d 29 7d 65 26 26 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 7c 7c 28 6b 2e 4d 30 2e 73 65 6e 64 41 70 70 45 72 72 Data Ascii: 00004000ErrorEvent({...I.dQb,message:`Error when loading top nav config: ${e instanceof Error?e.message:e}`,pb:{...I.dQb,topNavCandidateOptions:this.config.topNavCandidateOptions,topNavPivots:this.config.topNavPivots}})}e&&0!==e.length\|\|(k.M0.sendAppErr
2025-01-10 15:23:06 UTC	12	IN	Data Raw: 65 6e 74 4c 69 73 74 65 6e 65 0d 0a Data Ascii: entListene
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 72 28 22 72 65 66 72 65 73 68 46 65 65 64 22 2c 74 68 69 73 2e 6f 6e 46 65 65 64 52 65 66 72 65 73 68 29 2c 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6c 2e 70 67 2c 74 68 69 73 2e 74 6f 67 67 6c 65 57 69 64 67 65 74 50 69 63 6b 65 72 29 2c 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6c 2e 62 54 2c 74 68 69 73 2e 6f 70 65 6e 43 68 61 6e 6e 65 6c 53 74 6f 72 65 29 2c 74 68 69 73 2e 68 61 6e 64 6c 65 50 61 63 6b 61 67 65 53 74 61 74 65 43 68 61 6e 67 65 73 43 61 6c 6c 62 61 63 6b 26 26 43 2e 6a 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 54 6f 50 61 63 6b 61 67 65 53 74 61 74 65 28 74 68 69 73 2e 68 61 6e 64 6c 65 50 61 63 6b 61 67 65 53 74 61 74 65 43 Data Ascii: 00004000r("refreshFeed",this.onFeedRefresh),window.removeEventListener(l.pg,this.toggleWidgetPicker),window.removeEventListener(l.bT,this.openChannelStore),this.handlePackageStateChangesCallback&&C.j.removeListenerToPackageState(this.handlePackageStateC
2025-01-10 15:23:06 UTC	12	IN	Data Raw: 48 6f 76 65 72 49 74 65 6d 22 0d 0a Data Ascii: HoverItem"

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.24	59010	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:06 UTC	665	OUT	GET /bundles/v1/winWidgets/latest/experience.59c10e5fb50b1cb7db86.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:06 UTC	1243	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: +RHmlEVBttaX7URqh1jcgg== Last-Modified: Thu, 09 Jan 2025 14:24:25 GMT ETag: 0x8DD30B951D0C458 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 67494f65-701e-00f4-4fa2-623999000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:06 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.44,b=273097000,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=1, origin; dur=0, cdntime; dur=1, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.44 Akamai-Request-ID: 10472128 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.2cbe1cb8.1736522586.10472128 Vary: Origin
2025-01-10 15:23:06 UTC	15141	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 69 2c 6e 2c 6f 2c 61 2c 72 3d 7b 33 37 36 31 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 29 3b 76 61 72 20 6e 3d 69 28 34 33 33 34 38 29 2c 6f 3d 69 28 33 32 36 31 34 29 3b 63 6f 6e 73 74 20 61 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 65 2e 65 6e 63 6f 64 65 64 54 69 74 6c 65 3f 2e 5b 30 5d 3f 2e 64 61 74 61 7c 7c 22 22 2c 7b 69 6e 73 69 67 68 74 54 69 74 6c 65 3a 69 2c 69 6e 73 69 67 68 74 44 65 74 61 69 6c 3a 6e 7d 3d 73 28 65 29 2c 6f 3d 64 28 65 29 3b 72 65 74 75 72 6e 7b 74 69 74 6c 65 3a 74 2c 69 6e 73 69 67 68 74 54 69 74 6c Data Ascii: 00006000!function(){"use strict";var e,t,i,n,o,a,r={37615:function(e,t,i){i.d(t,{b:function(){return a}});var n=i(43348),o=i(32614);const a=e=>{const t=e.encodedTitle?.[0]?.data\|\|"",{insightTitle:i,insightDetail:n}=s(e),o=d(e);return{title:t,insightTitl
2025-01-10 15:23:06 UTC	9447	IN	Data Raw: 64 43 61 6c 6c 62 61 63 6b 28 29 7b 73 75 70 65 72 2e 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 2c 74 68 69 73 2e 73 70 69 6e 6e 65 72 43 6f 6d 70 6c 65 74 65 54 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 74 68 69 73 2e 73 70 69 6e 6e 65 72 43 6f 6d 70 6c 65 74 65 64 43 61 6c 6c 62 61 63 6b 26 26 74 68 69 73 2e 73 70 69 6e 6e 65 72 43 6f 6d 70 6c 65 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7d 29 2c 33 65 33 29 7d 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 73 70 69 6e 6e 65 72 43 6f 6d 70 6c 65 74 65 54 69 6d 65 72 29 2c 74 68 69 73 2e 73 70 69 6e 6e 65 72 43 6f 6d 70 6c 65 74 65 54 69 6d 65 72 3d 76 6f 69 64 20 30 7d 7d 28 30 2c 6e 2e 67 6e Data Ascii: dCallback(){super.connectedCallback(),this.spinnerCompleteTimer=setTimeout((()=>{this.spinnerCompletedCallback&&this.spinnerCompletedCallback()}),3e3)}disconnectedCallback(){clearTimeout(this.spinnerCompleteTimer),this.spinnerCompleteTimer=void 0}}(0,n.gn
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 32 29 2c 63 3d 69 28 39 33 37 30 33 29 3b 63 6f 6e 73 74 20 70 3d 64 2e 64 79 60 3c 66 6c 75 65 6e 74 2d 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 24 7b 65 3d 3e 60 24 7b 22 66 69 6c 6c 65 64 69 63 6f 6e 68 6f 76 65 72 22 3d 3d 3d 65 2e 6c 61 79 6f 75 74 3f 22 66 69 6c 6c 65 64 2d 69 63 6f 6e 2d 68 6f 76 65 72 22 3a 22 22 7d 20 24 7b 22 6e 6f 62 61 63 6b 70 6c 61 74 65 22 3d 3d 3d 65 2e 6c 61 79 6f 75 74 3f 22 6e 6f 2d 62 61 63 6b 70 6c 61 74 65 22 3a 22 22 7d 20 24 7b 65 2e 66 69 6c 6c 43 6f 6c 6f 72 53 65 6c 65 63 74 65 64 26 26 65 2e 73 65 6c 65 63 74 65 64 3f 22 20 66 69 6c 6c 2d 63 6f 6c 6f 72 2d 73 65 6c 65 63 74 65 64 22 3a 22 22 7d 60 7d 20 64 61 74 61 2d 69 63 6f 6e 3d 24 7b 65 3d 3e 65 2e 64 61 74 61 49 63 6f 6e 7d 20 Data Ascii: 000060002),c=i(93703);const p=d.dy`<fluent-button class=${e=>`${"fillediconhover"===e.layout?"filled-icon-hover":""} ${"nobackplate"===e.layout?"no-backplate":""} ${e.fillColorSelected&&e.selected?" fill-color-selected":""}`} data-icon=${e=>e.dataIcon}
2025-01-10 15:23:06 UTC	8204	IN	Data Raw: 30 38 36 37 35 20 31 32 2e 39 39 32 34 20 37 2e 33 36 39 36 39 20 31 33 2e 37 31 30 36 20 36 2e 34 38 38 30 33 20 31 34 2e 35 38 38 35 43 35 2e 39 33 37 30 34 20 31 35 2e 31 33 37 32 20 35 2e 30 36 32 39 35 20 31 35 2e 31 33 37 31 20 34 2e 35 31 32 30 38 20 31 34 2e 35 38 38 34 4c 32 2e 33 30 36 39 32 20 31 32 2e 33 37 39 32 43 32 2e 30 32 39 37 37 20 31 32 2e 30 39 38 39 20 31 2e 37 39 37 37 38 20 31 31 2e 38 36 32 36 20 31 2e 36 31 30 39 31 20 31 31 2e 36 37 30 31 43 2d 30 2e 35 33 36 39 37 31 20 39 2e 34 35 37 39 36 20 2d 30 2e 35 33 36 39 37 31 20 35 2e 38 37 31 32 39 20 31 2e 36 31 30 39 31 20 33 2e 36 35 39 31 33 43 33 2e 37 35 38 38 20 31 2e 34 34 36 39 36 20 37 2e 32 34 31 32 31 20 31 2e 34 34 36 39 36 20 39 2e 33 38 39 30 39 20 33 2e 36 35 39 31 Data Ascii: 08675 12.9924 7.36969 13.7106 6.48803 14.5885C5.93704 15.1372 5.06295 15.1371 4.51208 14.5884L2.30692 12.3792C2.02977 12.0989 1.79778 11.8626 1.61091 11.6701C-0.536971 9.45796 -0.536971 5.87129 1.61091 3.65913C3.7588 1.44696 7.24121 1.44696 9.38909 3.6591
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 63 74 69 6f 6e 3d 22 66 6f 72 77 61 72 64 22 2c 74 68 69 73 2e 61 75 74 6f 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 28 29 7d 2c 74 68 69 73 2e 6c 61 79 6f 75 74 3d 6e 2e 5f 32 5f 63 6f 6c 75 6d 6e 2c 74 68 69 73 2e 66 72 65 57 65 6c 63 6f 6d 65 41 6e 69 6d 61 74 69 6f 6e 52 75 6e 6e 69 6e 67 3d 21 31 2c 74 68 69 73 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 3d 61 2e 68 6f 72 69 7a 6f 6e 74 61 6c 2c 74 68 69 73 2e 61 63 74 69 76 65 69 6e 64 69 63 61 74 6f 72 3d 21 31 2c 74 68 69 73 2e 73 68 6f 77 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 3d 21 30 2c 74 68 69 73 2e 70 72 65 76 41 63 74 69 76 65 54 61 62 49 6e 64 65 78 3d 30 2c 74 68 69 73 2e 61 63 74 69 76 65 54 61 62 49 6e 64 65 78 3d 30 2c 74 68 69 73 2e 74 69 63 6b 69 6e 67 3d 21 Data Ascii: 00004000ction="forward",this.autoScrollHandler()},this.layout=n._2_column,this.freWelcomeAnimationRunning=!1,this.orientation=a.horizontal,this.activeindicator=!1,this.showActiveIndicator=!0,this.prevActiveTabIndex=0,this.activeTabIndex=0,this.ticking=!
2025-01-10 15:23:06 UTC	12	IN	Data Raw: 78 3d 22 30 20 30 20 31 36 20 0d 0a Data Ascii: x="0 0 16
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 31 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 32 37 33 20 31 35 2e 39 37 37 4c 33 2e 32 39 20 38 20 31 31 2e 32 37 33 2e 30 32 33 6c 2e 37 30 34 2e 37 30 34 4c 34 2e 37 31 20 38 6c 37 2e 32 36 36 20 37 2e 32 37 33 2d 2e 37 30 34 2e 37 30 34 7a 22 20 2f 3e 3c 2f 73 76 67 3e 3c 2f 73 6c 6f 74 3e 3c 2f 73 70 61 6e 3e 60 2c 4d 3d 66 2e 64 79 60 3c 73 70 61 6e 20 70 61 72 74 3d 22 6e 65 78 74 22 20 63 6c 61 73 73 3d 22 66 69 6c 6c 65 64 2d 6e 65 78 74 22 3e 3c 73 6c 6f 74 20 6e 61 6d 65 3d 22 66 69 6c 6c 65 64 2d 6e 65 78 74 22 3e 24 7b 66 2e 64 79 2e 70 61 72 74 69 61 6c 28 4c 28 29 29 7d 3c 2f 73 6c 6f 74 3e 3c 2f 73 70 Data Ascii: 0000400016" xmlns="http://www.w3.org/2000/svg"><path d="M11.273 15.977L3.29 8 11.273.023l.704.704L4.71 8l7.266 7.273-.704.704z" /></svg></slot></span>`,M=f.dy`<span part="next" class="filled-next"><slot name="filled-next">${f.dy.partial(L())}</slot></sp
2025-01-10 15:23:06 UTC	12	IN	Data Raw: 6e 67 74 68 3b 65 2e 68 69 64 0d 0a Data Ascii: ngth;e.hid
2025-01-10 15:23:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 43 68 69 6c 64 45 6c 65 6d 65 6e 74 73 28 65 2e 6d 61 78 43 6f 75 6e 74 29 2c 74 3e 30 26 26 28 30 2c 75 2e 4f 29 28 65 2e 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 2c 22 69 6e 6c 69 6e 65 47 72 6f 75 70 22 2c 60 63 2c 24 7b 74 7d 2c 24 7b 65 2e 76 69 73 69 62 6c 65 43 68 69 6c 64 45 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 7d 60 2c 30 29 7d 7d 2c 76 3d 65 3d 3e 7b 6c 65 74 20 74 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 68 65 69 67 68 74 3b 69 66 28 65 2e 6f 72 69 67 69 6e 61 6c 48 65 69 67 68 74 26 26 65 2e 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 60 68 65 69 67 Data Ascii: 00004000eChildElements(e.maxCount),t>0&&(0,u.O)(e.containerElement,"inlineGroup",`c,${t},${e.visibleChildElements.length}`,0)}},v=e=>{let t=e.parentElement.getBoundingClientRect().height;if(e.originalHeight&&e.containerElement.setAttribute("style",`heig
2025-01-10 15:23:06 UTC	12	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.24	59022	13.89.179.9	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:06 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1733760691000&w=0&anoncknm=app_anon HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5478 sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; USRLOC=; _C_ETH=1
2025-01-10 15:23:06 UTC	5478	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 36 3a 31 31 3a 33 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 62 61 73 65 44 61 74 61 22 3a 7b 7d 2c 22 62 61 73 65 54 79 70 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 42 61 73 65 22 2c 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 72 6f 64 75 63 74 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 74 79 70 65 22 3a 22 73 74 61 72 74 66 65 65 64 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 61 74 65 67 6f 72 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-12-09T16:11:31Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"baseData":{},"baseType":"MS.News.Web.Base","page":{"name":"default","product":"winWidgets","type":"startfeed","content":{"categor
2025-01-10 15:23:06 UTC	926	IN	HTTP/1.1 200 OK Content-Length: 153 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=c0a6c89166bb4cfe91d78af5e1e322c3&HASH=c0a6&LV=202501&V=4&LU=1736522586864; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:06 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=63cc4fbbf980464a9406c3eeeb2abd36; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:06 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2761895864 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:06 GMT Connection: close
2025-01-10 15:23:06 UTC	153	IN	Data Raw: 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 63 30 61 36 63 38 39 31 36 36 62 62 34 63 66 65 39 31 64 37 38 61 66 35 65 31 65 33 32 32 63 33 26 48 41 53 48 3d 63 30 61 36 26 4c 56 3d 32 30 32 35 30 31 26 56 3d 34 26 4c 55 3d 31 37 33 36 35 32 32 35 38 36 38 36 34 22 2c 22 6d 63 31 22 3a 22 63 30 61 36 63 38 39 31 36 36 62 62 34 63 66 65 39 31 64 37 38 61 66 35 65 31 65 33 32 32 63 33 22 7d 7d Data Ascii: {"acc":1,"webResult":{"msfpc":"GUID=c0a6c89166bb4cfe91d78af5e1e322c3&HASH=c0a6&LV=202501&V=4&LU=1736522586864","mc1":"c0a6c89166bb4cfe91d78af5e1e322c3"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.24	59019	13.89.179.9	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:06 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1733760691000&w=0&anoncknm=app_anon HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5480 sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; USRLOC=; _C_ETH=1
2025-01-10 15:23:06 UTC	5480	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 36 3a 31 31 3a 33 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 62 61 73 65 44 61 74 61 22 3a 7b 7d 2c 22 62 61 73 65 54 79 70 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 42 61 73 65 22 2c 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 72 6f 64 75 63 74 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 74 79 70 65 22 3a 22 73 74 61 72 74 66 65 65 64 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 61 74 65 67 6f 72 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-12-09T16:11:31Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"baseData":{},"baseType":"MS.News.Web.Base","page":{"name":"default","product":"winWidgets","type":"startfeed","content":{"categor
2025-01-10 15:23:07 UTC	926	IN	HTTP/1.1 200 OK Content-Length: 153 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=7a746fbac02a424897a2a25aa1951a5c&HASH=7a74&LV=202501&V=4&LU=1736522587128; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:07 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=015f8eef780b4f8b90de81801597f69b; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:07 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2761896128 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:06 GMT Connection: close
2025-01-10 15:23:07 UTC	153	IN	Data Raw: 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 37 61 37 34 36 66 62 61 63 30 32 61 34 32 34 38 39 37 61 32 61 32 35 61 61 31 39 35 31 61 35 63 26 48 41 53 48 3d 37 61 37 34 26 4c 56 3d 32 30 32 35 30 31 26 56 3d 34 26 4c 55 3d 31 37 33 36 35 32 32 35 38 37 31 32 38 22 2c 22 6d 63 31 22 3a 22 37 61 37 34 36 66 62 61 63 30 32 61 34 32 34 38 39 37 61 32 61 32 35 61 61 31 39 35 31 61 35 63 22 7d 7d Data Ascii: {"acc":1,"webResult":{"msfpc":"GUID=7a746fbac02a424897a2a25aa1951a5c&HASH=7a74&LV=202501&V=4&LU=1736522587128","mc1":"7a746fbac02a424897a2a25aa1951a5c"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.24	59024	13.89.179.9	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:06 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1733760691000&w=0&anoncknm=app_anon HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5478 sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; USRLOC=; _C_ETH=1
2025-01-10 15:23:06 UTC	5478	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 36 3a 31 31 3a 33 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 62 61 73 65 44 61 74 61 22 3a 7b 7d 2c 22 62 61 73 65 54 79 70 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 42 61 73 65 22 2c 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 72 6f 64 75 63 74 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 74 79 70 65 22 3a 22 73 74 61 72 74 66 65 65 64 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 61 74 65 67 6f 72 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-12-09T16:11:31Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"baseData":{},"baseType":"MS.News.Web.Base","page":{"name":"default","product":"winWidgets","type":"startfeed","content":{"categor
2025-01-10 15:23:06 UTC	926	IN	HTTP/1.1 200 OK Content-Length: 153 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=b8a2f5f85c1b4547927d4a02458ad0d9&HASH=b8a2&LV=202501&V=4&LU=1736522586877; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:06 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=3fde18e6d2e64e0ead6ea9e7cfabbb2d; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:06 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2761895877 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:06 GMT Connection: close
2025-01-10 15:23:06 UTC	153	IN	Data Raw: 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 62 38 61 32 66 35 66 38 35 63 31 62 34 35 34 37 39 32 37 64 34 61 30 32 34 35 38 61 64 30 64 39 26 48 41 53 48 3d 62 38 61 32 26 4c 56 3d 32 30 32 35 30 31 26 56 3d 34 26 4c 55 3d 31 37 33 36 35 32 32 35 38 36 38 37 37 22 2c 22 6d 63 31 22 3a 22 62 38 61 32 66 35 66 38 35 63 31 62 34 35 34 37 39 32 37 64 34 61 30 32 34 35 38 61 64 30 64 39 22 7d 7d Data Ascii: {"acc":1,"webResult":{"msfpc":"GUID=b8a2f5f85c1b4547927d4a02458ad0d9&HASH=b8a2&LV=202501&V=4&LU=1736522586877","mc1":"b8a2f5f85c1b4547927d4a02458ad0d9"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.24	59021	13.89.179.9	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:06 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1733760691000&w=0&anoncknm=app_anon HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5476 sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; USRLOC=; _C_ETH=1
2025-01-10 15:23:06 UTC	5476	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 36 3a 31 31 3a 33 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 62 61 73 65 44 61 74 61 22 3a 7b 7d 2c 22 62 61 73 65 54 79 70 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 42 61 73 65 22 2c 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 72 6f 64 75 63 74 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 74 79 70 65 22 3a 22 73 74 61 72 74 66 65 65 64 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 61 74 65 67 6f 72 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-12-09T16:11:31Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"baseData":{},"baseType":"MS.News.Web.Base","page":{"name":"default","product":"winWidgets","type":"startfeed","content":{"categor
2025-01-10 15:23:06 UTC	926	IN	HTTP/1.1 200 OK Content-Length: 153 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=055de2db5b9c49bf89f7844025e0f164&HASH=055d&LV=202501&V=4&LU=1736522586857; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:06 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=8f663d93e8d049d38794d36ced1f499d; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:06 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2761895857 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:06 GMT Connection: close
2025-01-10 15:23:06 UTC	153	IN	Data Raw: 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 30 35 35 64 65 32 64 62 35 62 39 63 34 39 62 66 38 39 66 37 38 34 34 30 32 35 65 30 66 31 36 34 26 48 41 53 48 3d 30 35 35 64 26 4c 56 3d 32 30 32 35 30 31 26 56 3d 34 26 4c 55 3d 31 37 33 36 35 32 32 35 38 36 38 35 37 22 2c 22 6d 63 31 22 3a 22 30 35 35 64 65 32 64 62 35 62 39 63 34 39 62 66 38 39 66 37 38 34 34 30 32 35 65 30 66 31 36 34 22 7d 7d Data Ascii: {"acc":1,"webResult":{"msfpc":"GUID=055de2db5b9c49bf89f7844025e0f164&HASH=055d&LV=202501&V=4&LU=1736522586857","mc1":"055de2db5b9c49bf89f7844025e0f164"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.24	59018	13.89.179.9	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:06 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1733760691000&w=0&anoncknm=app_anon HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5476 sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; USRLOC=; _C_ETH=1
2025-01-10 15:23:06 UTC	5476	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 36 3a 31 31 3a 33 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 62 61 73 65 44 61 74 61 22 3a 7b 7d 2c 22 62 61 73 65 54 79 70 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 42 61 73 65 22 2c 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 72 6f 64 75 63 74 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 74 79 70 65 22 3a 22 73 74 61 72 74 66 65 65 64 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 61 74 65 67 6f 72 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-12-09T16:11:31Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"baseData":{},"baseType":"MS.News.Web.Base","page":{"name":"default","product":"winWidgets","type":"startfeed","content":{"categor
2025-01-10 15:23:06 UTC	926	IN	HTTP/1.1 200 OK Content-Length: 153 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=66f3257d583841a0b88aec81593592c6&HASH=66f3&LV=202501&V=4&LU=1736522586893; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:06 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=9e60f35da534447a9d70e8c033234330; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:06 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2761895893 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:06 GMT Connection: close
2025-01-10 15:23:06 UTC	153	IN	Data Raw: 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 36 36 66 33 32 35 37 64 35 38 33 38 34 31 61 30 62 38 38 61 65 63 38 31 35 39 33 35 39 32 63 36 26 48 41 53 48 3d 36 36 66 33 26 4c 56 3d 32 30 32 35 30 31 26 56 3d 34 26 4c 55 3d 31 37 33 36 35 32 32 35 38 36 38 39 33 22 2c 22 6d 63 31 22 3a 22 36 36 66 33 32 35 37 64 35 38 33 38 34 31 61 30 62 38 38 61 65 63 38 31 35 39 33 35 39 32 63 36 22 7d 7d Data Ascii: {"acc":1,"webResult":{"msfpc":"GUID=66f3257d583841a0b88aec81593592c6&HASH=66f3&LV=202501&V=4&LU=1736522586893","mc1":"66f3257d583841a0b88aec81593592c6"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.24	59020	13.89.179.9	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:06 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1733760691000&w=0&anoncknm=app_anon HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5464 sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; USRLOC=; _C_ETH=1
2025-01-10 15:23:06 UTC	5464	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 36 3a 31 31 3a 33 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 62 61 73 65 44 61 74 61 22 3a 7b 7d 2c 22 62 61 73 65 54 79 70 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 42 61 73 65 22 2c 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 72 6f 64 75 63 74 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 74 79 70 65 22 3a 22 73 74 61 72 74 66 65 65 64 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 61 74 65 67 6f 72 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-12-09T16:11:31Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"baseData":{},"baseType":"MS.News.Web.Base","page":{"name":"default","product":"winWidgets","type":"startfeed","content":{"categor
2025-01-10 15:23:07 UTC	926	IN	HTTP/1.1 200 OK Content-Length: 153 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=bbcf752438ce4559888d84d29fb90f52&HASH=bbcf&LV=202501&V=4&LU=1736522587093; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:07 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=0098f3179dc644a1b78c8a078b8e7f6d; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:07 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2761896093 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:07 GMT Connection: close
2025-01-10 15:23:07 UTC	153	IN	Data Raw: 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 62 62 63 66 37 35 32 34 33 38 63 65 34 35 35 39 38 38 38 64 38 34 64 32 39 66 62 39 30 66 35 32 26 48 41 53 48 3d 62 62 63 66 26 4c 56 3d 32 30 32 35 30 31 26 56 3d 34 26 4c 55 3d 31 37 33 36 35 32 32 35 38 37 30 39 33 22 2c 22 6d 63 31 22 3a 22 62 62 63 66 37 35 32 34 33 38 63 65 34 35 35 39 38 38 38 64 38 34 64 32 39 66 62 39 30 66 35 32 22 7d 7d Data Ascii: {"acc":1,"webResult":{"msfpc":"GUID=bbcf752438ce4559888d84d29fb90f52&HASH=bbcf&LV=202501&V=4&LU=1736522587093","mc1":"bbcf752438ce4559888d84d29fb90f52"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.24	59028	13.89.179.9	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:07 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1733760691000&w=0&anoncknm=app_anon HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5464 sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; USRLOC=; _C_ETH=1
2025-01-10 15:23:07 UTC	5464	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 36 3a 31 31 3a 33 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 62 61 73 65 44 61 74 61 22 3a 7b 7d 2c 22 62 61 73 65 54 79 70 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 42 61 73 65 22 2c 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 72 6f 64 75 63 74 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 74 79 70 65 22 3a 22 73 74 61 72 74 66 65 65 64 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 61 74 65 67 6f 72 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-12-09T16:11:31Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"baseData":{},"baseType":"MS.News.Web.Base","page":{"name":"default","product":"winWidgets","type":"startfeed","content":{"categor
2025-01-10 15:23:07 UTC	926	IN	HTTP/1.1 200 OK Content-Length: 153 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=b6269448e4ea48f8ad76846bfc0bd728&HASH=b626&LV=202501&V=4&LU=1736522587870; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:07 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=2236139b9f9a42a4a22b8abff53379d3; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:07 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2761896870 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:07 GMT Connection: close
2025-01-10 15:23:07 UTC	153	IN	Data Raw: 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 62 36 32 36 39 34 34 38 65 34 65 61 34 38 66 38 61 64 37 36 38 34 36 62 66 63 30 62 64 37 32 38 26 48 41 53 48 3d 62 36 32 36 26 4c 56 3d 32 30 32 35 30 31 26 56 3d 34 26 4c 55 3d 31 37 33 36 35 32 32 35 38 37 38 37 30 22 2c 22 6d 63 31 22 3a 22 62 36 32 36 39 34 34 38 65 34 65 61 34 38 66 38 61 64 37 36 38 34 36 62 66 63 30 62 64 37 32 38 22 7d 7d Data Ascii: {"acc":1,"webResult":{"msfpc":"GUID=b6269448e4ea48f8ad76846bfc0bd728&HASH=b626&LV=202501&V=4&LU=1736522587870","mc1":"b6269448e4ea48f8ad76846bfc0bd728"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.24	59030	13.89.179.9	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:07 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1733760691000&w=0&anoncknm=app_anon HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5464 sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; USRLOC=; _C_ETH=1
2025-01-10 15:23:07 UTC	5464	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 36 3a 31 31 3a 33 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 62 61 73 65 44 61 74 61 22 3a 7b 7d 2c 22 62 61 73 65 54 79 70 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 42 61 73 65 22 2c 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 72 6f 64 75 63 74 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 74 79 70 65 22 3a 22 73 74 61 72 74 66 65 65 64 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 61 74 65 67 6f 72 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-12-09T16:11:31Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"baseData":{},"baseType":"MS.News.Web.Base","page":{"name":"default","product":"winWidgets","type":"startfeed","content":{"categor
2025-01-10 15:23:07 UTC	926	IN	HTTP/1.1 200 OK Content-Length: 153 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=9fd0ce26cffc40c0901bc81e17b512e3&HASH=9fd0&LV=202501&V=4&LU=1736522587766; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:07 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=eef9424d91e341e7ab763e5a4cc570f1; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:07 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2761896766 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:07 GMT Connection: close
2025-01-10 15:23:07 UTC	153	IN	Data Raw: 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 39 66 64 30 63 65 32 36 63 66 66 63 34 30 63 30 39 30 31 62 63 38 31 65 31 37 62 35 31 32 65 33 26 48 41 53 48 3d 39 66 64 30 26 4c 56 3d 32 30 32 35 30 31 26 56 3d 34 26 4c 55 3d 31 37 33 36 35 32 32 35 38 37 37 36 36 22 2c 22 6d 63 31 22 3a 22 39 66 64 30 63 65 32 36 63 66 66 63 34 30 63 30 39 30 31 62 63 38 31 65 31 37 62 35 31 32 65 33 22 7d 7d Data Ascii: {"acc":1,"webResult":{"msfpc":"GUID=9fd0ce26cffc40c0901bc81e17b512e3&HASH=9fd0&LV=202501&V=4&LU=1736522587766","mc1":"9fd0ce26cffc40c0901bc81e17b512e3"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.24	59029	13.89.179.9	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:07 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1733760691000&w=0&anoncknm=app_anon HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5464 sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; USRLOC=; _C_ETH=1
2025-01-10 15:23:07 UTC	5464	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 36 3a 31 31 3a 33 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 62 61 73 65 44 61 74 61 22 3a 7b 7d 2c 22 62 61 73 65 54 79 70 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 42 61 73 65 22 2c 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 72 6f 64 75 63 74 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 74 79 70 65 22 3a 22 73 74 61 72 74 66 65 65 64 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 61 74 65 67 6f 72 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-12-09T16:11:31Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"baseData":{},"baseType":"MS.News.Web.Base","page":{"name":"default","product":"winWidgets","type":"startfeed","content":{"categor
2025-01-10 15:23:07 UTC	926	IN	HTTP/1.1 200 OK Content-Length: 153 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=40b93138ad0b49f7ba666c673f84db9a&HASH=40b9&LV=202501&V=4&LU=1736522587806; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:07 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=c2102a29b21a4cac8111ff4c9875b358; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:07 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2761896806 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:07 GMT Connection: close
2025-01-10 15:23:07 UTC	153	IN	Data Raw: 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 34 30 62 39 33 31 33 38 61 64 30 62 34 39 66 37 62 61 36 36 36 63 36 37 33 66 38 34 64 62 39 61 26 48 41 53 48 3d 34 30 62 39 26 4c 56 3d 32 30 32 35 30 31 26 56 3d 34 26 4c 55 3d 31 37 33 36 35 32 32 35 38 37 38 30 36 22 2c 22 6d 63 31 22 3a 22 34 30 62 39 33 31 33 38 61 64 30 62 34 39 66 37 62 61 36 36 36 63 36 37 33 66 38 34 64 62 39 61 22 7d 7d Data Ascii: {"acc":1,"webResult":{"msfpc":"GUID=40b93138ad0b49f7ba666c673f84db9a&HASH=40b9&LV=202501&V=4&LU=1736522587806","mc1":"40b93138ad0b49f7ba666c673f84db9a"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.24	59031	13.89.179.9	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:07 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1733760691000&w=0&anoncknm=app_anon HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5464 sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; USRLOC=; _C_ETH=1
2025-01-10 15:23:07 UTC	5464	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 36 3a 31 31 3a 33 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 62 61 73 65 44 61 74 61 22 3a 7b 7d 2c 22 62 61 73 65 54 79 70 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 42 61 73 65 22 2c 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 72 6f 64 75 63 74 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 74 79 70 65 22 3a 22 73 74 61 72 74 66 65 65 64 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 61 74 65 67 6f 72 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-12-09T16:11:31Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"baseData":{},"baseType":"MS.News.Web.Base","page":{"name":"default","product":"winWidgets","type":"startfeed","content":{"categor
2025-01-10 15:23:08 UTC	926	IN	HTTP/1.1 200 OK Content-Length: 153 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=5e9c2e5eb1d54c6e9b3c22efdea47b5d&HASH=5e9c&LV=202501&V=4&LU=1736522588012; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:08 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=4761e85ed761491bb364664a92299fa3; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:08 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2761897012 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:07 GMT Connection: close
2025-01-10 15:23:08 UTC	153	IN	Data Raw: 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 35 65 39 63 32 65 35 65 62 31 64 35 34 63 36 65 39 62 33 63 32 32 65 66 64 65 61 34 37 62 35 64 26 48 41 53 48 3d 35 65 39 63 26 4c 56 3d 32 30 32 35 30 31 26 56 3d 34 26 4c 55 3d 31 37 33 36 35 32 32 35 38 38 30 31 32 22 2c 22 6d 63 31 22 3a 22 35 65 39 63 32 65 35 65 62 31 64 35 34 63 36 65 39 62 33 63 32 32 65 66 64 65 61 34 37 62 35 64 22 7d 7d Data Ascii: {"acc":1,"webResult":{"msfpc":"GUID=5e9c2e5eb1d54c6e9b3c22efdea47b5d&HASH=5e9c&LV=202501&V=4&LU=1736522588012","mc1":"5e9c2e5eb1d54c6e9b3c22efdea47b5d"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.24	59032	13.89.179.9	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:08 UTC	1058	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-2.2.2&apikey=0ded60c75e44443aa3484c42c1c43fe8-9fc57d3f-fdac-4bcf-b927-75eafe60192e-7279&upload-time=1733760691000&w=0&anoncknm=app_anon HTTP/1.1 Host: browser.events.data.msn.com Connection: keep-alive Content-Length: 5593 sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=14EA2E828C4D639509943BD28D2B6272; _EDGE_V=1; _EDGE_S=SID=0A8872268875624B1A216776892E6304; msnup=; USRLOC=; _C_ETH=1
2025-01-10 15:23:08 UTC	5593	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 41 70 70 45 72 72 6f 72 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 36 3a 31 31 3a 33 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 30 64 65 64 36 30 63 37 35 65 34 34 34 34 33 61 61 33 34 38 34 63 34 32 63 31 63 34 33 66 65 38 22 2c 22 64 61 74 61 22 3a 7b 22 62 61 73 65 44 61 74 61 22 3a 7b 7d 2c 22 62 61 73 65 54 79 70 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 42 61 73 65 22 2c 22 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 70 72 6f 64 75 63 74 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 74 79 70 65 22 3a 22 73 74 61 72 74 66 65 65 64 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 63 61 74 65 67 6f 72 Data Ascii: {"name":"MS.News.Web.AppError","time":"2024-12-09T16:11:31Z","ver":"4.0","iKey":"o:0ded60c75e44443aa3484c42c1c43fe8","data":{"baseData":{},"baseType":"MS.News.Web.Base","page":{"name":"default","product":"winWidgets","type":"startfeed","content":{"categor
2025-01-10 15:23:08 UTC	926	IN	HTTP/1.1 200 OK Content-Length: 153 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=18350ae8264d4831b79c79728b5cdf6b&HASH=1835&LV=202501&V=4&LU=1736522588070; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:08 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=254bc2b1fd8b490d8cf660e8687fc3c7; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:08 GMT; Path=/;Secure; SameSite=None time-delta-millis: 2761897070 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:07 GMT Connection: close
2025-01-10 15:23:08 UTC	153	IN	Data Raw: 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 31 38 33 35 30 61 65 38 32 36 34 64 34 38 33 31 62 37 39 63 37 39 37 32 38 62 35 63 64 66 36 62 26 48 41 53 48 3d 31 38 33 35 26 4c 56 3d 32 30 32 35 30 31 26 56 3d 34 26 4c 55 3d 31 37 33 36 35 32 32 35 38 38 30 37 30 22 2c 22 6d 63 31 22 3a 22 31 38 33 35 30 61 65 38 32 36 34 64 34 38 33 31 62 37 39 63 37 39 37 32 38 62 35 63 64 66 36 62 22 7d 7d Data Ascii: {"acc":1,"webResult":{"msfpc":"GUID=18350ae8264d4831b79c79728b5cdf6b&HASH=1835&LV=202501&V=4&LU=1736522588070","mc1":"18350ae8264d4831b79c79728b5cdf6b"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.24	59033	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:10 UTC	1221	OUT	GET /resolver/api/resolve/v3/config/?expType=AppConfig&expInstance=default&apptype=winWidgets&v=20250109.159&targetScope={%22audienceMode%22:%22adult%22,%22browser%22:{%22browserType%22:%22edgeChromium%22,%22version%22:%22100%22,%22ismobile%22:%22false%22},%22deviceFormFactor%22:%22desktop%22,%22domain%22:%22windows.msn.com%22,%22locale%22:{%22content%22:{%22language%22:%22de%22,%22market%22:%22ch%22},%22display%22:{%22language%22:%22en%22,%22market%22:%22us%22}},%22os%22:%22windows%22,%22platform%22:%22web%22,%22pageType%22:%22startfeed%22,%22pageExperiments%22:[%22prg-pr2-stalecontent%22,%22prg-pr2-trf-rhighimp%22]} HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://windows.msn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:10 UTC	1654	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Kestrel ETag: "62WEvD3mkL1zdKR3ZNWYfWHwcq0" X-CRS-BuildVersion: 20241220.4_master X-CRS-Env: Production X-AS-SuppressSetCookie: 1 nel-report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA X-Ceto-ref: 677ff0bc9b2f454998ae26083ea463a8\|AFD:677ff0bc9b2f454998ae26083ea463a8\|2025-01-09T15:52:28.389Z Cache-Control: public, max-age=1728000 Date: Fri, 10 Jan 2025 15:23:10 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.14,b=69870343,c=g,n=US_NJ_SECAUCUS,o=20940],[c=p,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=8, origin; dur=0, cdntime; dur=8, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Miss from child, Hit from parent Akamai-Server-IP: 184.28.190.14 Akamai-Request-ID: 42a2307 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.0ebe1cb8.1736522590.42a2307 Vary: Origin
2025-01-10 15:23:10 UTC	14730	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 7b 22 63 6f 6e 66 69 67 73 22 3a 7b 22 41 70 70 43 6f 6e 66 69 67 2f 64 65 66 61 75 6c 74 22 3a 7b 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 72 6f 6f 74 45 78 70 65 72 69 65 6e 63 65 22 3a 7b 22 63 6f 6e 66 69 67 52 65 66 22 3a 7b 22 65 78 70 65 72 69 65 6e 63 65 54 79 70 65 22 3a 22 57 69 64 67 65 74 73 22 2c 22 69 6e 73 74 61 6e 63 65 53 72 63 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 7d 7d 2c 22 57 69 64 67 65 74 73 2f 64 65 66 61 75 6c 74 22 3a 7b 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 64 61 74 61 43 6f 6e 6e 65 63 74 6f 72 73 22 3a 5b 7b 22 73 63 72 65 65 6e 57 69 64 74 68 22 3a 22 41 6e 79 22 2c 22 63 68 69 6c 64 72 65 6e 22 3a 5b 7b 22 69 6e 73 74 61 6e 63 65 49 64 22 3a 22 4e 75 72 74 75 72 69 6e 67 50 6c 61 63 Data Ascii: 00006000{"configs":{"AppConfig/default":{"properties":{"rootExperience":{"configRef":{"experienceType":"Widgets","instanceSrc":"default"}}}},"Widgets/default":{"properties":{"dataConnectors":[{"screenWidth":"Any","children":[{"instanceId":"NurturingPlac
2025-01-10 15:23:10 UTC	9858	IN	Data Raw: 69 6d 75 6c 61 74 69 6f 6e 22 2c 22 67 65 6e 72 65 54 69 6d 65 22 3a 22 54 69 6d 65 22 2c 22 67 65 6e 72 65 54 6f 6f 6c 22 3a 22 54 6f 6f 6c 22 2c 22 67 65 6e 72 65 4d 61 74 68 22 3a 22 4d 61 74 68 22 2c 22 67 65 6e 72 65 52 65 63 6f 6d 6d 65 6e 64 65 64 22 3a 22 52 65 63 6f 6d 6d 65 6e 64 65 64 22 2c 22 73 65 65 41 6c 6c 22 3a 22 53 65 65 20 61 6c 6c 22 2c 22 6e 6f 77 50 6c 61 79 22 3a 22 4e 6f 77 20 50 6c 61 79 69 6e 67 22 2c 22 73 74 61 66 66 50 69 63 6b 48 65 61 64 65 72 22 3a 22 53 74 61 66 66 20 50 69 63 6b 73 22 2c 22 72 65 63 65 6e 74 50 6c 61 79 48 65 61 64 65 72 22 3a 22 52 65 63 65 6e 74 6c 79 20 50 6c 61 79 65 64 22 2c 22 67 65 6e 72 65 49 6e 66 6f 48 65 61 64 65 72 22 3a 22 54 6f 70 20 43 61 74 65 67 6f 72 69 65 73 22 2c 22 67 61 6d 65 4e 61 Data Ascii: imulation","genreTime":"Time","genreTool":"Tool","genreMath":"Math","genreRecommended":"Recommended","seeAll":"See all","nowPlay":"Now Playing","staffPickHeader":"Staff Picks","recentPlayHeader":"Recently Played","genreInfoHeader":"Top Categories","gameNa
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 72 65 64 4e 73 22 3a 22 6d 73 6e 2d 6e 73 22 7d 7d 2c 22 74 6f 61 73 74 57 43 22 3a 7b 22 69 6e 73 74 61 6e 63 65 49 64 22 3a 22 54 6f 61 73 74 57 43 22 2c 22 63 6f 6e 66 69 67 52 65 66 22 3a 7b 22 65 78 70 65 72 69 65 6e 63 65 54 79 70 65 22 3a 22 54 6f 61 73 74 57 43 22 2c 22 69 6e 73 74 61 6e 63 65 53 72 63 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 22 77 65 61 74 68 65 72 43 61 72 64 22 3a 7b 22 69 6e 73 74 61 6e 63 65 49 64 22 3a 22 57 65 61 74 68 65 72 43 61 72 64 57 43 22 2c 22 63 6f 6e 66 69 67 52 65 66 22 3a 7b 22 65 78 70 65 72 69 65 6e 63 65 54 79 70 65 22 3a 22 57 65 61 74 68 65 72 43 61 72 64 57 43 22 2c 22 69 6e 73 74 61 6e 63 65 53 72 63 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 22 6d 6f 6e 65 79 49 6e 66 6f Data Ascii: 00006000aredNs":"msn-ns"}},"toastWC":{"instanceId":"ToastWC","configRef":{"experienceType":"ToastWC","instanceSrc":"default"}},"weatherCard":{"instanceId":"WeatherCardWC","configRef":{"experienceType":"WeatherCardWC","instanceSrc":"default"}},"moneyInfo
2025-01-10 15:23:10 UTC	8204	IN	Data Raw: 22 2c 22 72 65 70 6f 72 74 41 64 44 69 61 6c 6f 67 43 6c 6f 73 65 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 43 6c 6f 73 65 22 2c 22 62 69 6e 67 56 69 64 65 6f 48 65 61 64 65 72 53 65 65 41 6c 6c 22 3a 22 53 65 65 20 61 6c 6c 22 2c 22 62 69 6e 67 56 69 64 65 6f 48 65 61 64 65 72 54 69 74 6c 65 22 3a 22 54 72 65 6e 64 69 6e 67 20 56 69 64 65 6f 73 20 66 6f 72 20 79 6f 75 22 2c 22 62 69 6e 67 56 69 64 65 6f 4e 6f 50 72 65 76 69 65 77 53 74 72 22 3a 22 4e 6f 20 50 72 65 76 69 65 77 22 2c 22 62 69 6e 67 56 69 64 65 6f 50 72 65 76 69 65 77 53 74 72 22 3a 22 50 72 65 76 69 65 77 22 2c 22 62 69 6e 67 56 69 64 65 6f 54 61 67 22 3a 22 56 69 64 65 6f 73 22 2c 22 62 69 6e 67 56 69 64 65 6f 56 69 65 77 73 22 3a 22 7b 30 7d 20 76 69 65 77 73 22 2c 22 73 65 65 4d 6f 72 65 Data Ascii: ","reportAdDialogCloseButtonText":"Close","bingVideoHeaderSeeAll":"See all","bingVideoHeaderTitle":"Trending Videos for you","bingVideoNoPreviewStr":"No Preview","bingVideoPreviewStr":"Preview","bingVideoTag":"Videos","bingVideoViews":"{0} views","seeMore
2025-01-10 15:23:10 UTC	2742	IN	Data Raw: 30 30 30 30 30 41 41 41 0d 0a 65 72 54 65 6d 70 22 3a 22 43 75 72 72 65 6e 74 20 74 65 6d 70 65 72 61 74 75 72 65 20 61 6c 65 72 74 73 22 2c 22 74 65 61 73 65 72 53 75 6d 6d 61 72 79 22 3a 22 57 65 65 6b 2f 57 65 65 6b 65 6e 64 20 77 65 61 74 68 65 72 20 73 75 6d 6d 61 72 79 22 2c 22 74 65 61 73 65 72 54 65 6d 70 52 65 63 6f 72 64 22 3a 22 54 65 6d 70 65 72 61 74 75 72 65 20 72 65 63 6f 72 64 22 7d 2c 22 74 72 61 66 66 69 63 53 74 72 69 6e 67 73 22 3a 7b 22 63 61 74 65 67 6f 72 79 4c 61 62 65 6c 22 3a 22 54 72 61 66 66 69 63 22 2c 22 63 6f 6d 6d 75 74 65 22 3a 22 43 6f 6d 6d 75 74 65 20 73 74 61 74 75 73 22 2c 22 68 69 67 68 65 73 74 49 6d 70 61 63 74 49 6e 63 69 64 65 6e 74 22 3a 22 48 69 67 68 2d 69 6d 70 61 63 74 20 69 6e 63 69 64 65 6e 74 73 22 2c 22 Data Ascii: 00000AAAerTemp":"Current temperature alerts","teaserSummary":"Week/Weekend weather summary","teaserTempRecord":"Temperature record"},"trafficStrings":{"categoryLabel":"Traffic","commute":"Commute status","highestImpactIncident":"High-impact incidents","
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 4e 75 6d 62 65 72 44 61 79 41 67 6f 22 3a 22 7b 30 7d 20 64 61 79 22 2c 22 4e 75 6d 62 65 72 44 61 79 73 41 67 6f 22 3a 22 7b 30 7d 20 64 61 79 73 22 2c 22 4e 75 6d 62 65 72 48 6f 75 72 41 67 6f 22 3a 22 7b 30 7d 20 68 6f 75 72 22 2c 22 4e 75 6d 62 65 72 48 6f 75 72 73 41 67 6f 22 3a 22 7b 30 7d 20 68 6f 75 72 73 22 2c 22 4e 75 6d 62 65 72 4d 69 6e 75 74 65 41 67 6f 22 3a 22 7b 30 7d 20 6d 69 6e 75 74 65 22 2c 22 4e 75 6d 62 65 72 4d 69 6e 75 74 65 73 41 67 6f 22 3a 22 7b 30 7d 20 6d 69 6e 75 74 65 73 22 2c 22 4a 75 73 74 4e 6f 77 22 3a 22 6a 75 73 74 20 6e 6f 77 22 2c 22 4e 75 6d 62 65 72 57 65 65 6b 41 67 6f 22 3a 22 7b 30 7d 20 77 65 65 6b 22 2c 22 4e 75 6d 62 65 72 57 65 65 6b 73 41 67 6f 22 3a 22 7b 30 7d 20 77 65 65 6b Data Ascii: 00004000NumberDayAgo":"{0} day","NumberDaysAgo":"{0} days","NumberHourAgo":"{0} hour","NumberHoursAgo":"{0} hours","NumberMinuteAgo":"{0} minute","NumberMinutesAgo":"{0} minutes","JustNow":"just now","NumberWeekAgo":"{0} week","NumberWeeksAgo":"{0} week
2025-01-10 15:23:10 UTC	12	IN	Data Raw: 64 65 6d 61 70 73 6d 65 74 61 0d 0a Data Ascii: demapsmeta
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 64 61 74 61 22 3a 74 72 75 65 2c 22 70 61 72 74 69 61 6c 48 6f 75 72 73 22 3a 31 33 2c 22 72 65 67 69 6f 6e 63 61 74 65 67 6f 72 69 65 73 22 3a 22 61 6c 65 72 74 2c 63 6f 6e 74 65 6e 74 22 2c 22 69 6e 63 6c 75 64 65 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 69 73 53 65 67 6d 65 6e 74 43 61 6c 6c 22 3a 74 72 75 65 2c 22 71 75 65 72 69 65 73 22 3a 7b 22 63 6f 6e 74 65 6e 74 63 6f 75 6e 74 22 3a 22 33 22 7d 7d 2c 22 74 6b 52 74 4d 69 6e 69 4c 31 54 79 70 65 44 69 73 61 62 6c 65 64 22 3a 5b 22 4d 75 6c 74 69 49 6e 66 6f 22 2c 22 41 6c 65 72 74 4e 6f 77 63 61 73 74 22 2c 22 41 51 49 43 61 72 64 22 5d 2c 22 73 6c 6f 74 73 22 3a 7b 22 77 65 61 74 68 65 72 4d 69 6e 69 6d 61 70 57 43 22 3a 7b 22 69 6e 73 74 61 6e 63 65 49 64 22 3a 22 Data Ascii: 00004000data":true,"partialHours":13,"regioncategories":"alert,content","includeCookie":true,"isSegmentCall":true,"queries":{"contentcount":"3"}},"tkRtMiniL1TypeDisabled":["MultiInfo","AlertNowcast","AQICard"],"slots":{"weatherMinimapWC":{"instanceId":"
2025-01-10 15:23:10 UTC	12	IN	Data Raw: 22 42 48 44 22 3a 22 2e d8 af 0d 0a Data Ascii: "BHD":".
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2e d8 a8 22 2c 22 42 49 46 22 3a 22 46 62 75 22 2c 22 42 4d 44 22 3a 22 24 22 2c 22 42 4e 44 22 3a 22 24 22 2c 22 42 4f 42 22 3a 22 24 62 22 2c 22 42 52 4c 22 3a 22 52 24 22 2c 22 42 53 44 22 3a 22 42 24 22 2c 22 42 54 43 22 3a 22 e2 82 bf 22 2c 22 42 57 50 22 3a 22 50 22 2c 22 42 59 4e 22 3a 22 42 72 22 2c 22 42 5a 44 22 3a 22 42 5a 24 22 2c 22 43 41 44 22 3a 22 24 22 2c 22 43 44 46 22 3a 22 46 22 2c 22 43 48 46 22 3a 22 43 48 46 22 2c 22 43 4c 50 22 3a 22 24 22 2c 22 43 4e 59 22 3a 22 c2 a5 22 2c 22 43 4f 50 22 3a 22 24 22 2c 22 43 52 43 22 3a 22 e2 82 a1 22 2c 22 43 55 50 22 3a 22 24 22 2c 22 43 56 45 22 3a 22 45 73 63 22 2c 22 43 5a 4b 22 3a 22 4b c4 8d 22 2c 22 44 4a 46 22 3a 22 46 64 6a 22 2c 22 44 4b 4b 22 3a 22 6b 72 Data Ascii: 00004000.","BIF":"Fbu","BMD":"$","BND":"$","BOB":"$b","BRL":"R$","BSD":"B$","BTC":"","BWP":"P","BYN":"Br","BZD":"BZ$","CAD":"$","CDF":"F","CHF":"CHF","CLP":"$","CNY":"","COP":"$","CRC":"","CUP":"$","CVE":"Esc","CZK":"K","DJF":"Fdj","DKK":"kr

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.24	59038	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:10 UTC	670	OUT	GET /bundles/v1/winWidgets/latest/common-segments.484c688f730e76f122fa.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:10 UTC	1237	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: UqnMNa2OCGq7Ym2KbDFz/g== Last-Modified: Tue, 07 Jan 2025 15:57:41 GMT ETag: 0x8DD2F34043A78A9 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 2e5799bb-601e-002d-071d-61e96c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:10 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.37,b=8402165,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=1, origin; dur=0, cdntime; dur=1, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.37 Akamai-Request-ID: 8034f5 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.25be1cb8.1736522590.8034f5 Vary: Origin
2025-01-10 15:23:10 UTC	15147	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 73 65 67 6d 65 6e 74 73 22 5d 2c 7b 34 32 34 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 72 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 7d 7d 29 3b 76 61 72 20 61 3d 69 28 33 33 39 34 30 29 2c 6f 3d 69 28 39 30 35 39 31 29 2c 6e 3d 69 28 34 39 32 31 38 29 2c 72 3d 69 28 39 37 31 30 38 29 2c 73 3d 69 28 35 38 39 36 38 29 2c 64 3d 69 28 39 34 35 33 37 29 2c Data Ascii: 00006000"use strict";(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["common-segments"],{42446:function(e,t,i){i.d(t,{rw:function(){return z}});var a=i(33940),o=i(90591),n=i(49218),r=i(97108),s=i(58968),d=i(94537),
2025-01-10 15:23:10 UTC	9441	IN	Data Raw: 65 64 69 61 43 6c 69 63 6b 28 74 2e 65 76 65 6e 74 29 7d 22 20 24 7b 28 30 2c 43 2e 69 29 28 22 6d 65 64 69 61 43 6f 6e 74 72 6f 6c 22 29 7d 3e 24 7b 28 30 2c 78 2e 67 29 28 28 65 3d 3e 21 21 65 2e 70 6c 61 79 29 2c 6e 2e 64 79 60 3c 73 6c 6f 74 20 6e 61 6d 65 3d 22 70 61 75 73 65 2d 69 63 6f 6e 22 20 64 61 74 61 2d 74 3d 22 24 7b 65 3d 3e 65 2e 70 61 75 73 65 54 65 6c 65 6d 65 74 72 79 7d 22 3e e2 8f b8 26 23 78 46 45 30 45 3b 3c 2f 73 6c 6f 74 3e 60 2c 6e 2e 64 79 60 3c 73 6c 6f 74 20 6e 61 6d 65 3d 22 70 6c 61 79 2d 69 63 6f 6e 22 20 64 61 74 61 2d 74 3d 22 24 7b 65 3d 3e 65 2e 70 6c 61 79 54 65 6c 65 6d 65 74 72 79 7d 22 3e e2 8f b5 26 23 78 46 45 30 45 3b 3c 2f 73 6c 6f 74 3e 60 29 7d 3c 2f 64 69 76 3e 60 29 7d 3c 2f 64 69 76 3e 3c 73 6c 6f 74 20 6e Data Ascii: ediaClick(t.event)}" ${(0,C.i)("mediaControl")}>${(0,x.g)((e=>!!e.play),n.dy`<slot name="pause-icon" data-t="${e=>e.pauseTelemetry}">︎</slot>`,n.dy`<slot name="play-icon" data-t="${e=>e.playTelemetry}">︎</slot>`)}</div>`)}</div><slot n
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 68 69 73 2e 64 61 74 61 2e 64 61 72 6b 43 61 72 64 46 69 6c 6c 43 6f 6c 6f 72 7c 7c 21 74 68 69 73 2e 64 61 74 61 2e 6c 69 67 68 74 43 61 72 64 46 69 6c 6c 43 6f 6c 6f 72 29 72 65 74 75 72 6e 3b 76 61 72 20 74 2c 69 3b 74 3d 65 2c 28 69 3d 74 68 69 73 29 26 26 69 2e 64 61 74 61 26 26 28 43 28 74 2c 69 2e 64 61 74 61 29 2c 69 2e 63 61 72 64 46 69 6c 6c 43 6f 6c 6f 72 3d 69 2e 64 61 74 61 3f 2e 63 61 72 64 46 69 6c 6c 43 6f 6c 6f 72 2c 69 2e 64 61 74 61 3f 2e 69 6d 6d 65 72 73 69 76 65 43 61 72 64 26 26 28 69 2e 69 6d 6d 65 72 73 69 76 65 49 6d 61 67 65 3d 74 3f 69 2e 64 61 74 61 3f 2e 64 61 72 6b 49 6d 6d 65 72 73 69 76 65 49 6d 61 67 65 3a 69 2e 64 61 74 61 3f 2e 6c 69 67 68 74 49 6d 6d 65 72 73 69 76 65 49 6d 61 67 65 29 29 Data Ascii: 00006000his.data.darkCardFillColor\|\|!this.data.lightCardFillColor)return;var t,i;t=e,(i=this)&&i.data&&(C(t,i.data),i.cardFillColor=i.data?.cardFillColor,i.data?.immersiveCard&&(i.immersiveImage=t?i.data?.darkImmersiveImage:i.data?.lightImmersiveImage))
2025-01-10 15:23:10 UTC	8204	IN	Data Raw: 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 70 2e 4c 4f 5d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 68 6f 77 54 68 61 6e 6b 42 61 6e 6e 65 72 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 70 2e 4c 4f 5d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 65 65 64 62 61 63 6b 44 69 61 6c 6f 67 43 6f 6e 66 69 67 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 70 2e 4c 4f 5d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 65 65 64 62 61 63 6b 54 65 78 74 73 77 69 74 68 54 65 6c 65 6d 65 74 72 79 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 70 2e 4c 4f 5d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6c 6f 61 64 46 65 65 64 62 61 63 6b 4c 69 6e 6b 57 43 45 22 2c 76 6f 69 64 20 30 29 7d 2c 32 38 32 32 3a 66 75 6e Data Ascii: ",void 0),(0,a.gn)([p.LO],u.prototype,"showThankBanner",void 0),(0,a.gn)([p.LO],u.prototype,"feedbackDialogConfig",void 0),(0,a.gn)([p.LO],u.prototype,"feedbackTextswithTelemetry",void 0),(0,a.gn)([p.LO],u.prototype,"loadFeedbackLinkWCE",void 0)},2822:fun
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 72 44 61 74 61 2e 64 69 73 6d 69 73 73 4d 65 6e 75 44 61 74 61 2e 69 73 44 69 73 6d 69 73 73 4d 65 6e 75 4f 70 65 6e 3d 74 29 2c 74 26 26 65 3f 28 74 68 69 73 2e 64 69 73 6d 69 73 73 4d 65 6e 75 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 3d 65 26 26 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 43 6c 69 63 6b 46 6f 72 44 69 73 6d 69 73 73 4d 65 6e 75 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 46 6f 72 44 69 73 6d 69 73 73 4d 65 6e 75 29 29 3a 28 74 68 69 73 2e 64 69 73 6d Data Ascii: 00004000rData.dismissMenuData.isDismissMenuOpen=t),t&&e?(this.dismissMenuButtonElement=e&&e.currentTarget,document.addEventListener("click",this.handleClickForDismissMenu),document.addEventListener("keydown",this.handleKeyDownForDismissMenu)):(this.dism
2025-01-10 15:23:10 UTC	12	IN	Data Raw: 67 68 74 33 30 34 22 2c 76 6f 0d 0a Data Ascii: ght304",vo
2025-01-10 15:23:10 UTC	1169	IN	Data Raw: 30 30 30 30 30 34 38 35 0d 0a 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 28 30 2c 64 2e 4c 6a 29 28 7b 61 74 74 72 69 62 75 74 65 3a 22 72 65 73 70 6f 6e 73 69 76 65 2d 77 69 64 74 68 22 7d 29 5d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 65 73 70 6f 6e 73 69 76 65 57 69 64 74 68 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 6c 2e 4c 4f 5d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 61 74 61 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 6c 2e 4c 4f 5d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 73 53 44 43 61 72 64 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 5b 6c 2e 4c 4f 5d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 73 46 6f 6f 74 65 72 52 65 66 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 61 2e 67 6e 29 28 Data Ascii: 00000485id 0),(0,a.gn)([(0,d.Lj)({attribute:"responsive-width"})],b.prototype,"responsiveWidth",void 0),(0,a.gn)([l.LO],b.prototype,"data",void 0),(0,a.gn)([l.LO],b.prototype,"csSDCard",void 0),(0,a.gn)([l.LO],b.prototype,"csFooterRef",void 0),(0,a.gn)(
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 33 3b 77 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 73 65 2d 77 69 64 74 68 29 20 2a 20 31 70 78 29 7d 63 73 2d 73 64 2d 63 61 72 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 73 64 2d 63 61 72 64 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2c 63 61 6c 63 28 24 7b 4f 2e 72 53 7d 20 2a 20 31 70 78 29 29 3b 63 6f 6e 74 61 69 6e 3a 75 6e 73 65 74 3b 63 6f 6e 74 65 6e 74 2d 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 7a 2d 69 6e 64 65 78 3a 75 6e 73 65 74 7d 63 73 2d 73 64 2d 63 61 72 64 5b 73 69 7a 65 3d 22 5f 31 78 5f 33 79 22 5d 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 28 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 73 65 2d 68 65 69 67 68 74 Data Ascii: 00004000p:0;z-index:3;width:calc(var(--card-base-width) * 1px)}cs-sd-card{border-radius:var(--sd-card-border-radius,calc(${O.rS} * 1px));contain:unset;content-visibility:visible;z-index:unset}cs-sd-card[size="_1x_3y"]{height:calc((var(--card-base-height
2025-01-10 15:23:10 UTC	12	IN	Data Raw: 2e 73 2e 72 65 67 69 73 74 72 0d 0a Data Ascii: .s.registr
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 79 29 7d 63 6f 6e 73 74 20 5f 3d 28 29 3d 3e 7b 6e 2e 4a 2e 64 65 66 69 6e 65 28 50 2e 73 2e 72 65 67 69 73 74 72 79 29 2c 4f 2e 64 65 66 69 6e 65 28 50 2e 73 2e 72 65 67 69 73 74 72 79 29 2c 6f 2e 47 2e 64 65 66 69 6e 65 28 50 2e 73 2e 72 65 67 69 73 74 72 79 29 2c 53 2e 4f 2e 64 65 66 69 6e 65 28 50 2e 73 2e 72 65 67 69 73 74 72 79 29 7d 2c 47 3d 28 29 3d 3e 7b 5f 28 29 2c 28 30 2c 61 2e 41 29 28 29 2c 56 28 29 7d 7d 2c 32 32 36 33 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 24 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 7d 29 3b 76 61 72 20 61 3d 69 28 32 36 35 31 32 29 2c 6f 3d 69 28 35 35 31 33 35 29 2c 6e 3d 69 28 31 37 39 39 33 29 2c 72 3d 69 28 32 32 36 37 34 29 2c 73 Data Ascii: 00004000y)}const _=()=>{n.J.define(P.s.registry),O.define(P.s.registry),o.G.define(P.s.registry),S.O.define(P.s.registry)},G=()=>{_(),(0,a.A)(),V()}},22639:function(e,t,i){i.d(t,{$:function(){return y}});var a=i(26512),o=i(55135),n=i(17993),r=i(22674),s

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.24	59037	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:10 UTC	668	OUT	GET /bundles/v1/winWidgets/latest/common-others.b1fdc7d281e36456e775.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:10 UTC	1244	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: MCtc9W9TcYcS2ZVAWDEQ7g== Last-Modified: Tue, 07 Jan 2025 15:57:42 GMT ETag: 0x8DD2F3404C35AAC Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 30b7f1b6-701e-00c5-781d-6170fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:10 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.31,b=1262780243,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.31 Akamai-Request-ID: 4b447f53 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.1fbe1cb8.1736522590.4b447f53 Vary: Origin
2025-01-10 15:23:10 UTC	15140	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 6f 74 68 65 72 73 22 5d 2c 7b 35 38 32 37 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 65 29 2c 61 2e 64 28 65 2c 7b 52 65 73 70 6f 6e 73 69 76 65 4c 69 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 2c 52 65 73 70 6f 6e 73 69 76 65 4c 69 73 74 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 2c 63 73 52 65 73 70 6f 6e 73 69 76 65 4c Data Ascii: 00006000(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["common-others"],{58278:function(t,e,a){"use strict";a.r(e),a.d(e,{ResponsiveList:function(){return j},ResponsiveListStyles:function(){return g},csResponsiveL
2025-01-10 15:23:10 UTC	9448	IN	Data Raw: 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 24 7b 79 2e 48 2e 48 69 67 68 6c 69 67 68 74 54 65 78 74 7d 7d 2e 61 64 64 6f 6e 2d 62 75 74 74 6f 6e 20 69 6d 67 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 24 7b 79 2e 48 2e 48 69 67 68 6c 69 67 68 74 7d 20 30 70 78 20 30 70 78 20 31 70 78 29 7d 60 2c 77 3d 62 2e 69 60 20 63 73 2d 73 64 2d 69 6e 6c 69 6e 65 2d 61 63 74 69 6f 6e 73 2d 63 61 72 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 2e 34 39 64 65 67 2c 23 35 31 35 63 36 63 20 2d 35 2e 30 34 25 2c 23 35 34 35 31 36 36 20 35 39 2e 33 39 25 29 7d 63 73 2d 73 64 2d 69 6e 6c 69 6e 65 2d 61 63 74 69 6f 6e 73 2d 63 61 72 64 28 5b 73 69 7a 65 3d 22 5f 31 78 5f 31 79 22 5d 29 7b 62 61 63 6b 67 72 6f 75 6e Data Ascii: round-color:${y.H.HighlightText}}.addon-button img{filter:drop-shadow(${y.H.Highlight} 0px 0px 1px)}`,w=b.i` cs-sd-inline-actions-card{background:linear-gradient(135.49deg,#515c6c -5.04%,#545166 59.39%)}cs-sd-inline-actions-card([size="_1x_1y"]){backgroun
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2e 61 63 74 69 6f 6e 4d 65 6e 75 43 6f 6e 74 65 6e 74 7d 7d 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 73 2e 4c 2e 67 65 74 43 6f 6e 66 69 67 28 29 2c 74 68 69 73 2e 73 74 72 69 6e 67 73 3d 73 2e 4c 2e 67 65 74 4c 6f 63 53 74 72 69 6e 67 73 28 29 2c 74 68 69 73 2e 73 68 6f 77 41 64 53 6c 75 67 73 3d 74 68 69 73 2e 73 68 6f 77 41 64 53 6c 75 67 73 7c 7c 74 68 69 73 2e 64 61 74 61 3f 2e 68 65 61 64 65 72 44 61 74 61 3f 2e 73 68 6f 77 41 64 53 6c 75 67 73 2c 74 68 69 73 2e 73 65 6c 66 54 65 6c 65 6d 65 74 72 79 54 61 67 3d 6e 65 77 20 76 2e 44 28 7b 6e 61 6d 65 3a 22 53 75 70 65 72 43 61 72 6f 75 73 65 6c 22 7d 29 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 2c 73 75 70 Data Ascii: 00006000.actionMenuContent}}connectedCallback(){this.config=s.L.getConfig(),this.strings=s.L.getLocStrings(),this.showAdSlugs=this.showAdSlugs\|\|this.data?.headerData?.showAdSlugs,this.selfTelemetryTag=new v.D({name:"SuperCarousel"}).getMetadataTag(),sup
2025-01-10 15:23:10 UTC	8204	IN	Data Raw: 74 65 6e 74 2e 6c 65 6e 67 74 68 3e 3d 32 26 26 74 2e 74 61 62 4e 61 6d 65 29 2c 51 2e 64 79 60 3c 63 73 2d 73 74 72 69 70 65 2d 74 61 62 20 64 61 74 61 2d 74 3d 22 24 7b 74 3d 3e 74 2e 74 65 6c 65 6d 65 74 72 79 54 61 67 7d 22 3e 24 7b 74 3d 3e 74 2e 74 61 62 4e 61 6d 65 7d 3c 2f 63 73 2d 73 74 72 69 70 65 2d 74 61 62 3e 60 29 7d 20 24 7b 28 74 2c 65 29 3d 3e 7b 72 65 74 75 72 6e 20 61 3d 65 2c 51 2e 64 79 60 3c 63 73 2d 73 74 72 69 70 65 2d 74 61 62 2d 70 61 6e 65 6c 20 70 61 72 74 3d 22 73 74 72 69 70 65 2d 74 61 62 2d 70 61 6e 65 6c 22 20 63 6c 61 73 73 3d 22 73 75 70 65 72 2d 73 74 72 69 70 65 2d 74 61 62 2d 70 61 6e 65 6c 20 24 7b 28 74 2c 65 29 3d 3e 65 2e 70 61 72 65 6e 74 26 26 65 2e 70 61 72 65 6e 74 2e 75 73 65 49 6e 66 6f 50 61 6e 65 3f 22 68 Data Ascii: tent.length>=2&&t.tabName),Q.dy`<cs-stripe-tab data-t="${t=>t.telemetryTag}">${t=>t.tabName}</cs-stripe-tab>`)} ${(t,e)=>{return a=e,Q.dy`<cs-stripe-tab-panel part="stripe-tab-panel" class="super-stripe-tab-panel ${(t,e)=>e.parent&&e.parent.useInfoPane?"h
2025-01-10 15:23:10 UTC	11124	IN	Data Raw: 30 30 30 30 32 42 36 38 0d 0a 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 63 61 72 6f 75 73 65 6c 2d 63 61 72 64 2d 68 65 61 64 69 6e 67 2d 66 6f 6e 74 2d 73 69 7a 65 2c 24 7b 45 74 2e 50 7d 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 63 61 72 6f 75 73 65 6c 2d 63 61 72 64 2d 68 65 61 64 69 6e 67 2d 6c 69 6e 65 2d 68 65 69 67 68 74 2c 24 7b 45 74 2e 62 7d 29 7d 2e 68 65 61 64 69 6e 67 3a 61 66 74 65 72 7b 62 6f 74 74 6f 6d 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 76 61 72 28 2d 2d 73 6c 6f 70 70 79 2d 63 6c 69 63 6b 2d 7a 2d 69 6e 64 65 78 2c 32 29 Data Ascii: 00002B68ont-size:var(--carousel-card-heading-font-size,${Et.P});line-height:var(--carousel-card-heading-line-height,${Et.b})}.heading:after{bottom:0;content:"";height:100%;left:0;position:absolute;right:0;width:100%;z-index:var(--sloppy-click-z-index,2)
2025-01-10 15:23:10 UTC	12108	IN	Data Raw: 30 30 30 30 32 46 34 30 0d 0a 22 2c 76 6f 69 64 20 30 29 3b 76 61 72 20 76 3d 61 28 34 39 37 35 32 29 2c 62 3d 61 28 34 39 32 31 38 29 3b 63 6f 6e 73 74 20 78 3d 28 30 2c 76 2e 53 29 28 7b 6e 65 78 74 46 6c 69 70 70 65 72 3a 62 2e 64 79 60 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 63 73 2d 66 6c 69 70 70 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 69 7a 65 3d 22 24 7b 74 3d 3e 74 2e 66 6c 69 70 70 65 72 53 69 7a 65 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 40 63 6c 69 63 6b 3d 22 24 7b 74 3d 3e 74 2e 73 63 72 6f 6c 6c 54 6f 4e 65 78 74 28 29 7d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 24 7b 74 3d 3e 74 2e 66 6c 69 70 70 65 72 73 48 69 64 64 65 6e 46 72 6f 6d 41 54 7d 22 0a Data Ascii: 00002F40",void 0);var v=a(49752),b=a(49218);const x=(0,v.S)({nextFlipper:b.dy` <cs-flipper size="${t=>t.flipperSize}" @click="${t=>t.scrollToNext()}" aria-hidden="${t=>t.flippersHiddenFromAT}"
2025-01-10 15:23:10 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.24	59036	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:10 UTC	671	OUT	GET /bundles/v1/winWidgets/latest/common-feed-libs.cad137bb0459e28c3b26.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:10 UTC	1245	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: wva/eFSdLk0KXh6/ITyvWQ== Last-Modified: Thu, 09 Jan 2025 14:24:23 GMT ETag: 0x8DD30B950C75B3E Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: edc83d5b-e01e-00a5-0ca2-620c65000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:10 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.36,b=379808617,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=3, clienttt; dur=31, origin; dur=0, cdntime; dur=31, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.36 Akamai-Request-ID: 16a36b69 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.24be1cb8.1736522590.16a36b69 Vary: Origin
2025-01-10 15:23:10 UTC	15139	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 66 65 65 64 2d 6c 69 62 73 22 5d 2c 7b 37 30 39 39 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 41 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 63 6f 6e 73 74 20 69 3d 22 73 68 6f 77 4f 72 48 69 64 65 43 4f 6e 74 65 6e 74 42 61 64 67 65 22 7d 2c 32 38 34 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 59 3a 66 75 6e 63 74 Data Ascii: 00006000"use strict";(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["common-feed-libs"],{70992:function(e,t,n){n.d(t,{A:function(){return i}});const i="showOrHideCOntentBadge"},28443:function(e,t,n){n.d(t,{Y:funct
2025-01-10 15:23:10 UTC	9449	IN	Data Raw: 63 6c 75 64 65 73 28 65 29 3b 72 65 74 75 72 6e 20 74 7c 7c 6e 7d 7d 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 68 69 6c 64 54 65 6d 70 6c 61 74 65 4d 61 70 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6f 6c 75 6d 6e 73 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 77 69 64 65 43 61 72 64 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 77 69 64 65 43 61 72 64 53 69 7a 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 63 74 Data Ascii: cludes(e);return t\|\|n}}(0,i.gn)([d.LO],h.prototype,"childTemplateMap",void 0),(0,i.gn)([d.LO],h.prototype,"columns",void 0),(0,i.gn)([d.LO],h.prototype,"wideCard",void 0),(0,i.gn)([d.LO],h.prototype,"wideCardSize",void 0),(0,i.gn)([d.LO],h.prototype,"sect
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6e 2e 72 65 70 6c 61 63 65 28 60 24 7b 72 7d 20 60 2c 60 24 7b 72 7d 2c 20 60 29 7d 72 65 74 75 72 6e 20 6e 7d 66 6f 72 6d 61 74 4d 6f 6e 74 68 44 61 79 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 72 6d 61 74 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 54 65 78 74 28 65 2c 69 2e 4d 6f 6e 74 68 44 61 79 2c 74 29 7d 66 6f 72 6d 61 74 4d 6f 6e 74 68 44 61 79 4e 75 6d 65 72 69 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 72 6d 61 74 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 54 65 78 74 28 65 2c 69 2e 4d 6f 6e 74 68 44 61 79 4e 75 6d 65 72 69 63 2c 74 29 7d 66 6f 72 6d 61 74 57 65 65 6b 53 68 6f 72 74 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 74 68 69 73 2e 66 6f 72 6d 61 74 44 61 74 65 54 69 6d 65 46 6f Data Ascii: 00006000n.replace(`${r} `,`${r}, `)}return n}formatMonthDay(e,t){return this.formatDateTimeFormatText(e,i.MonthDay,t)}formatMonthDayNumeric(e,t){return this.formatDateTimeFormatText(e,i.MonthDayNumeric,t)}formatWeekShort(e,t){let n=this.formatDateTimeFo
2025-01-10 15:23:10 UTC	8204	IN	Data Raw: 63 72 6f 6c 6c 50 72 65 76 69 65 77 3a 6e 2e 65 6e 61 62 6c 65 56 69 64 65 6f 43 61 72 64 53 63 72 6f 6c 6c 2c 65 6e 61 62 6c 65 46 61 73 74 65 72 50 6c 61 79 65 72 3a 6e 2e 65 6e 61 62 6c 65 46 61 73 74 65 72 50 6c 61 79 65 72 2c 65 6e 61 62 6c 65 56 69 64 65 6f 50 6f 73 74 53 63 72 6f 6c 6c 3a 6e 2e 65 6e 61 62 6c 65 56 69 64 65 6f 50 6f 73 74 53 63 72 6f 6c 6c 2c 64 69 73 61 62 6c 65 49 66 49 6e 66 6f 70 61 6e 65 45 78 69 73 74 73 3a 6e 2e 64 69 73 61 62 6c 65 56 69 64 65 6f 50 72 65 76 69 65 77 41 54 46 7d 3b 74 68 69 73 2e 76 69 64 65 6f 45 6c 65 6d 65 6e 74 26 26 28 74 68 69 73 2e 70 72 65 76 69 65 77 4d 61 6e 61 67 65 72 49 6e 73 74 61 6e 63 65 3d 73 2e 6c 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 69 29 2c 74 68 69 73 2e 70 72 65 76 69 65 77 4d 61 6e Data Ascii: crollPreview:n.enableVideoCardScroll,enableFasterPlayer:n.enableFasterPlayer,enableVideoPostScroll:n.enableVideoPostScroll,disableIfInfopaneExists:n.disableVideoPreviewATF};this.videoElement&&(this.previewManagerInstance=s.l.getInstance(i),this.previewMan
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 72 64 3d 22 4d 69 63 72 6f 73 6f 66 74 46 65 65 64 43 61 72 64 22 2c 65 2e 43 6f 6d 70 61 6e 79 4e 65 77 73 43 61 72 64 3d 22 43 6f 6d 70 61 6e 79 4e 65 77 73 43 61 72 64 22 7d 28 69 7c 7c 28 69 3d 7b 7d 29 29 7d 2c 33 34 35 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 43 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 56 51 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 69 3d 6e 28 39 30 31 35 38 29 2c 72 3d 6e 28 36 32 38 34 36 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 3f 2e 6e 65 65 64 48 65 61 64 65 72 3f 3f 21 31 7d 63 61 74 63 68 28 65 29 Data Ascii: 00004000rd="MicrosoftFeedCard",e.CompanyNewsCard="CompanyNewsCard"}(i\|\|(i={}))},34595:function(e,t,n){n.d(t,{Ch:function(){return a},VQ:function(){return s}});var i=n(90158),r=n(62846);function a(e,t){if(function(e){try{return e?.needHeader??!1}catch(e)
2025-01-10 15:23:10 UTC	12	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 0d 0a Data Ascii: nction(){r
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 74 75 72 6e 20 62 6e 2e 5f 59 7d 7d 29 3b 76 61 72 20 69 3d 6e 28 39 30 31 35 38 29 2c 72 3d 6e 28 31 36 32 33 33 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 28 30 2c 69 2e 64 77 29 28 22 66 65 74 63 68 41 64 73 22 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 6e 29 3d 3e 7b 61 28 65 2c 28 65 3d 3e 7b 74 28 65 29 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 28 30 2c 69 2e 64 77 29 28 22 67 65 74 41 70 70 4c 69 73 74 22 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 6e 29 3d 3e 7b 73 28 65 2c 28 65 3d 3e 7b 74 28 65 29 7d 29 29 Data Ascii: 00004000eturn bn._Y}});var i=n(90158),r=n(16233);function a(e,t){(0,i.dw)("fetchAds",e,t)}function o(e){return new Promise(((t,n)=>{a(e,(e=>{t(e)}))}))}function s(e,t){(0,i.dw)("getAppList",e,t)}function d(e){return new Promise(((t,n)=>{s(e,(e=>{t(e)}))
2025-01-10 15:23:10 UTC	12	IN	Data Raw: 7d 7d 3b 28 30 2c 77 2e 64 29 0d 0a Data Ascii: }};(0,w.d)
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 65 3d 21 30 2c 74 2c 6e 2c 69 29 7b 63 6f 6e 73 74 20 72 3d 7b 70 61 72 74 6e 65 72 3a 70 74 2c 64 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 22 68 6f 6d 65 70 61 67 65 46 65 65 64 41 64 73 43 61 72 64 52 65 61 64 79 22 2c 70 61 72 61 6d 73 3a 41 74 28 65 2c 74 2c 6e 2c 69 29 7d 7d 3b 28 30 2c 77 2e 64 29 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 65 3d 21 30 2c 74 2c 6e 2c 69 29 7b 63 6f 6e 73 74 20 72 3d 69 3f 2e 73 63 72 65 65 6e 57 69 64 74 68 50 78 2f 69 3f 2e 73 63 72 65 65 6e 57 69 64 74 68 3b 72 65 74 75 72 6e 7b 73 6e 61 70 73 68 6f 74 3a 7b 61 6c 6c 6f 77 3a 65 26 26 21 21 69 3f 2e 73 63 72 65 65 6e 57 69 64 74 68 26 26 21 21 69 3f 2e 73 63 72 65 65 6e 48 65 69 67 68 74 Data Ascii: 00006000(r)}function It(e=!0,t,n,i){const r={partner:pt,data:{method:"homepageFeedAdsCardReady",params:At(e,t,n,i)}};(0,w.d)(r)}function At(e=!0,t,n,i){const r=i?.screenWidthPx/i?.screenWidth;return{snapshot:{allow:e&&!!i?.screenWidth&&!!i?.screenHeight
2025-01-10 15:23:10 UTC	8204	IN	Data Raw: 22 2c 43 6f 6e 6e 65 63 74 69 63 75 74 3a 22 43 54 22 2c 44 65 6c 61 77 61 72 65 3a 22 44 45 22 2c 46 6c 6f 72 69 64 61 3a 22 46 4c 22 2c 47 65 6f 72 67 69 61 3a 22 47 41 22 2c 48 61 77 61 69 69 3a 22 48 49 22 2c 49 64 61 68 6f 3a 22 49 44 22 2c 49 6c 6c 69 6e 6f 69 73 3a 22 49 4c 22 2c 49 6e 64 69 61 6e 61 3a 22 49 4e 22 2c 49 6f 77 61 3a 22 49 41 22 2c 4b 61 6e 73 61 73 3a 22 4b 53 22 2c 4b 65 6e 74 75 63 6b 79 3a 22 4b 59 22 2c 4c 6f 75 69 73 69 61 6e 61 3a 22 4c 41 22 2c 4d 61 69 6e 65 3a 22 4d 45 22 2c 4d 61 72 79 6c 61 6e 64 3a 22 4d 44 22 2c 4d 61 73 73 61 63 68 75 73 65 74 74 73 3a 22 4d 41 22 2c 4d 69 63 68 69 67 61 6e 3a 22 4d 49 22 2c 4d 69 6e 6e 65 73 6f 74 61 3a 22 4d 4e 22 2c 4d 69 73 73 69 73 73 69 70 70 69 3a 22 4d 53 22 2c 4d 69 73 73 6f Data Ascii: ",Connecticut:"CT",Delaware:"DE",Florida:"FL",Georgia:"GA",Hawaii:"HI",Idaho:"ID",Illinois:"IL",Indiana:"IN",Iowa:"IA",Kansas:"KS",Kentucky:"KY",Louisiana:"LA",Maine:"ME",Maryland:"MD",Massachusetts:"MA",Michigan:"MI",Minnesota:"MN",Mississippi:"MS",Misso

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.24	59034	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:10 UTC	755	OUT	GET /bundles/v1/winWidgets/latest/cs-core-desktop_card-components_dist_card-banner_index_js-cs-core-desktop_card-components_dis-9069ae.abf514e47605b1f8c4fc.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:10 UTC	1243	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 1eGyzs2KnFZVcuUgpMUQrw== Last-Modified: Fri, 03 Jan 2025 22:12:42 GMT ETag: 0x8DD2C43BE49F27A Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: e299be26-501e-0104-062c-5ec877000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:10 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.39,b=740485197,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=6, origin; dur=0, cdntime; dur=6, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.39 Akamai-Request-ID: 2c22e84d Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.27be1cb8.1736522590.2c22e84d Vary: Origin
2025-01-10 15:23:10 UTC	15141	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 73 2d 63 6f 72 65 2d 64 65 73 6b 74 6f 70 5f 63 61 72 64 2d 63 6f 6d 70 6f 6e 65 6e 74 73 5f 64 69 73 74 5f 63 61 72 64 2d 62 61 6e 6e 65 72 5f 69 6e 64 65 78 5f 6a 73 2d 63 73 2d 63 6f 72 65 2d 64 65 73 6b 74 6f 70 5f 63 61 72 64 2d 63 6f 6d 70 6f 6e 65 6e 74 73 5f 64 69 73 2d 39 30 36 39 61 65 22 5d 2c 7b 31 39 36 32 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 69 2e 64 28 65 2c 7b 4f 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 00006000"use strict";(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["cs-core-desktop_card-components_dist_card-banner_index_js-cs-core-desktop_card-components_dis-9069ae"],{19625:function(t,e,i){i.d(e,{O:function(
2025-01-10 15:23:10 UTC	9447	IN	Data Raw: 65 74 72 79 4f 62 6a 65 63 74 3f 2e 63 6f 6e 74 72 61 63 74 2c 6e 61 6d 65 3a 74 2e 69 73 46 6f 6c 6c 6f 77 65 64 3f 22 75 6e 64 6f 22 3a 22 73 65 65 6d 6f 72 65 22 2c 61 63 74 69 6f 6e 3a 61 2e 41 77 2e 43 6c 69 63 6b 2c 62 65 68 61 76 69 6f 72 3a 61 2e 77 75 2e 4d 6f 72 65 2c 74 79 70 65 3a 61 2e 63 39 2e 41 63 74 69 6f 6e 42 75 74 74 6f 6e 7d 29 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 2c 74 68 69 73 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 54 6f 61 73 74 45 6c 65 6d 26 26 28 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 74 68 69 73 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 54 6f 61 73 74 45 6c 65 6d 26 26 74 68 69 73 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 54 6f 61 73 74 45 6c 65 6d 2e 66 6f 63 75 73 28 29 2c 65 26 26 65 Data Ascii: etryObject?.contract,name:t.isFollowed?"undo":"seemore",action:a.Aw.Click,behavior:a.wu.More,type:a.c9.ActionButton}).getMetadataTag(),this.notificationToastElem&&(window.setTimeout((()=>{this.notificationToastElem&&this.notificationToastElem.focus(),e&&e
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 73 68 46 6f 6c 6c 6f 77 53 74 61 74 75 73 26 26 74 2e 69 73 46 6f 6c 6c 6f 77 65 64 7d 22 20 64 65 73 63 72 69 70 74 69 6f 6e 3d 22 24 7b 74 3d 3e 74 2e 69 6e 74 65 72 65 73 74 54 79 70 65 7d 22 20 40 63 6c 69 63 6b 3d 22 24 7b 28 74 2c 65 29 3d 3e 65 2e 70 61 72 65 6e 74 3f 2e 6f 6e 49 6e 74 65 72 65 73 74 4f 70 74 69 6f 6e 43 6c 69 63 6b 28 74 2c 65 2e 65 76 65 6e 74 29 7d 22 20 40 6b 65 79 75 70 3d 22 24 7b 28 74 2c 65 29 3d 3e 65 2e 65 76 65 6e 74 26 26 22 45 6e 74 65 72 22 3d 3d 3d 65 2e 65 76 65 6e 74 2e 6b 65 79 3f 65 2e 70 61 72 65 6e 74 3f 2e 6f 6e 49 6e 74 65 72 65 73 74 4f 70 74 69 6f 6e 43 6c 69 63 6b 28 74 2c 65 2e 65 76 65 6e 74 29 3a 6e 75 6c 6c 7d 22 20 74 61 62 69 6e 64 65 78 3d 30 20 64 61 74 61 2d 74 3d 24 Data Ascii: 00006000shFollowStatus&&t.isFollowed}" description="${t=>t.interestType}" @click="${(t,e)=>e.parent?.onInterestOptionClick(t,e.event)}" @keyup="${(t,e)=>e.event&&"Enter"===e.event.key?e.parent?.onInterestOptionClick(t,e.event):null}" tabindex=0 data-t=$
2025-01-10 15:23:10 UTC	8204	IN	Data Raw: 65 2c 69 2c 6e 2c 61 7d 7d 60 29 7d 3c 64 69 76 20 61 72 69 61 2d 6c 69 76 65 3d 22 70 6f 6c 69 74 65 22 20 61 72 69 61 2d 61 74 6f 6d 69 63 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 6c 69 76 65 72 65 67 69 6f 6e 20 76 69 73 75 61 6c 6c 79 68 69 64 64 65 6e 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 60 2c 59 3d 6a 2e 64 79 60 3c 61 20 40 63 6c 69 63 6b 3d 22 24 7b 28 74 2c 65 29 3d 3e 74 2e 66 6f 6f 74 65 72 44 61 74 61 3f 2e 66 6f 6f 74 65 72 4c 69 6e 6b 3f 2e 6f 6e 43 6c 69 63 6b 26 26 74 2e 66 6f 6f 74 65 72 44 61 74 61 2e 66 6f 6f 74 65 72 4c 69 6e 6b 2e 6f 6e 43 6c 69 63 6b 28 65 2e 65 76 65 6e 74 29 7d 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 24 7b 74 3d 3e 74 2e 66 6f 6f 74 65 72 44 61 74 61 3f 2e 66 6f 6f 74 65 72 4c 69 6e 6b 3f 2e 74 65 78 74 7d Data Ascii: e,i,n,a}}`)}<div aria-live="polite" aria-atomic="true" class="liveregion visuallyhidden"></div></div>`,Y=j.dy`<a @click="${(t,e)=>t.footerData?.footerLink?.onClick&&t.footerData.footerLink.onClick(e.event)}" aria-label=${t=>t.footerData?.footerLink?.text}
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 32 5f 72 65 67 75 6c 61 72 2e 73 76 67 22 20 2f 3e 3c 2f 62 75 74 74 6f 6e 3e 60 2c 49 3d 24 2e 64 79 60 3c 64 69 76 20 40 6d 6f 75 73 65 65 6e 74 65 72 3d 22 24 7b 28 74 2c 65 29 3d 3e 74 2e 68 61 6e 64 6c 65 49 6e 74 65 72 65 73 74 4d 65 6e 75 4d 6f 75 73 65 45 6e 74 65 72 28 65 2e 65 76 65 6e 74 29 7d 22 20 40 6d 6f 75 73 65 6c 65 61 76 65 3d 22 24 7b 28 74 2c 65 29 3d 3e 74 2e 68 61 6e 64 6c 65 49 6e 74 65 72 65 73 74 4d 65 6e 75 4d 6f 75 73 65 4c 65 61 76 65 28 65 2e 65 76 65 6e 74 29 7d 22 20 63 6c 61 73 73 3d 22 74 6f 70 69 63 2d 6d 65 6e 75 2d 6e 61 76 2d 63 6f 6e 74 65 6e 74 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 73 74 2d 73 63 72 6f 6c 6c 22 3e 3c 72 65 73 70 6f 6e 73 69 76 65 2d 69 6e 74 65 72 Data Ascii: 000040002_regular.svg" /></button>`,I=$.dy`<div @mouseenter="${(t,e)=>t.handleInterestMenuMouseEnter(e.event)}" @mouseleave="${(t,e)=>t.handleInterestMenuMouseLeave(e.event)}" class="topic-menu-nav-content"><div class="nav-list-scroll"><responsive-inter
2025-01-10 15:23:10 UTC	12	IN	Data Raw: 61 72 65 6e 74 54 65 6c 65 6d 0d 0a Data Ascii: arentTelem
2025-01-10 15:23:10 UTC	7985	IN	Data Raw: 30 30 30 30 31 46 32 35 0d 0a 65 74 72 79 4f 62 6a 65 63 74 3f 2e 61 64 64 4f 72 55 70 64 61 74 65 43 68 69 6c 64 28 7b 2e 2e 2e 74 68 69 73 2e 70 61 72 65 6e 74 54 65 6c 65 6d 65 74 72 79 4f 62 6a 65 63 74 3f 2e 63 6f 6e 74 72 61 63 74 2c 6e 61 6d 65 3a 22 66 6f 6c 6c 6f 77 69 6e 74 65 72 65 73 74 73 22 2c 61 63 74 69 6f 6e 3a 64 2e 41 77 2e 43 6c 69 63 6b 2c 62 65 68 61 76 69 6f 72 3a 64 2e 77 75 2e 52 65 66 72 65 73 68 2c 74 79 70 65 3a 64 2e 63 39 2e 45 6e 74 69 74 79 7d 29 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 7d 7d 63 6f 6e 6e 65 63 74 65 64 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 6c 2e 4c 2e 67 65 74 43 6f 6e 66 69 67 28 29 2c 74 68 69 73 2e 73 74 72 69 6e 67 73 3d 6c 2e 4c 2e 67 65 74 4c 6f 63 53 74 72 69 6e 67 73 28 29 2c 28 30 Data Ascii: 00001F25etryObject?.addOrUpdateChild({...this.parentTelemetryObject?.contract,name:"followinterests",action:d.Aw.Click,behavior:d.wu.Refresh,type:d.c9.Entity}).getMetadataTag()}}connected(){this.config=l.L.getConfig(),this.strings=l.L.getLocStrings(),(0
2025-01-10 15:23:10 UTC	6460	IN	Data Raw: 30 30 30 30 31 39 33 30 0d 0a 64 6f 74 2d 68 6f 76 65 72 2d 73 69 7a 65 29 7d 2e 74 61 62 5b 61 72 69 61 2d 73 65 6c 65 63 74 65 64 3d 22 66 61 6c 73 65 22 5d 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 20 2e 64 6f 74 7b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 64 6f 74 2d 61 63 74 69 76 65 2d 68 6f 76 65 72 2d 73 69 7a 65 2c 33 70 78 29 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 64 6f 74 2d 61 63 74 69 76 65 2d 68 6f 76 65 72 2d 73 69 7a 65 2c 33 70 78 29 7d 60 2e 77 69 74 68 42 65 68 61 76 69 6f 72 73 28 6e 65 77 20 68 2e 59 28 6e 75 6c 6c 2c 63 2e 69 60 20 2e 74 61 62 3a 68 6f 76 65 72 20 2e 64 6f 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 64 6f 74 2d 63 6f 6c 6f 72 2d 68 6f 76 65 72 2c 72 67 62 28 32 35 35 20 32 35 Data Ascii: 00001930dot-hover-size)}.tab[aria-selected="false"]:active:hover .dot{height:var(--dot-active-hover-size,3px);width:var(--dot-active-hover-size,3px)}`.withBehaviors(new h.Y(null,c.i` .tab:hover .dot{background:var(--pagination-dot-color-hover,rgb(255 25
2025-01-10 15:23:10 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.24	59035	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:10 UTC	755	OUT	GET /bundles/v1/winWidgets/latest/libs_data-transformer-shared_dist_index_js-libs_money-info-loader_dist_index_js-libs_money-da-adb667.712127fe7f4ebc6b0c5f.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:10 UTC	1207	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: LTddWjMNiqHR6BcMEvN3GQ== Last-Modified: Thu, 09 Jan 2025 14:24:25 GMT ETag: 0x8DD30B951B544D2 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 7c592d14-801e-0025-1ca2-62f363000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:10 GMT Content-Length: 44385 Connection: close Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.30,b=1132204675,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=1, origin; dur=0, cdntime; dur=1, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.30 Akamai-Request-ID: 437c1283 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.1ebe1cb8.1736522590.437c1283 Vary: Origin
2025-01-10 15:23:10 UTC	15177	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 64 61 74 61 2d 74 72 61 6e 73 66 6f 72 6d 65 72 2d 73 68 61 72 65 64 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6c 69 62 73 5f 6d 6f 6e 65 79 2d 69 6e 66 6f 2d 6c 6f 61 64 65 72 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6c 69 62 73 5f 6d 6f 6e 65 79 2d 64 61 2d 61 64 62 36 36 37 22 5d 2c 7b 38 35 31 31 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 44 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: "use strict";(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["libs_data-transformer-shared_dist_index_js-libs_money-info-loader_dist_index_js-libs_money-da-adb667"],{85117:function(e,t,n){n.d(t,{DV:function(){return
2025-01-10 15:23:10 UTC	9399	IN	Data Raw: 22 66 6f 6c 6c 6f 77 2d 62 75 74 74 6f 6e 22 2c 51 75 6f 74 65 49 74 65 6d 3a 22 71 75 6f 74 65 2d 69 74 65 6d 22 2c 4d 61 72 6b 65 74 42 72 69 65 66 3a 22 6d 61 72 6b 65 74 2d 62 72 69 65 66 22 2c 45 76 65 6e 74 42 72 69 65 66 3a 22 65 76 65 6e 74 2d 62 72 69 65 66 22 2c 50 72 69 63 65 53 70 6f 74 6c 69 67 68 74 3a 22 70 72 69 63 65 2d 73 70 6f 74 6c 69 67 68 74 22 2c 50 72 69 63 65 53 70 6f 74 6c 69 67 68 74 56 32 3a 22 70 72 69 63 65 2d 73 70 6f 74 6c 69 67 68 74 2d 76 32 22 2c 53 70 6f 74 6c 69 67 68 74 45 61 72 6e 69 6e 67 73 3a 22 73 70 6f 74 6c 69 67 68 74 2d 65 61 72 6e 69 6e 67 73 22 2c 53 70 6f 74 6c 69 67 68 74 50 72 65 45 61 72 6e 69 6e 67 73 3a 22 73 70 6f 74 6c 69 67 68 74 2d 70 72 65 2d 65 61 72 6e 69 6e 67 73 22 2c 57 61 74 63 68 6c 69 73 Data Ascii: "follow-button",QuoteItem:"quote-item",MarketBrief:"market-brief",EventBrief:"event-brief",PriceSpotlight:"price-spotlight",PriceSpotlightV2:"price-spotlight-v2",SpotlightEarnings:"spotlight-earnings",SpotlightPreEarnings:"spotlight-pre-earnings",Watchlis
2025-01-10 15:23:10 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 65 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 2c 67 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 6f 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 2c 72 24 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 32 32 38 32 36 29 2c 69 3d 6e 28 32 31 37 38 39 29 2c 6f 3d 6e 28 38 35 37 29 2c 61 3d 6e 28 38 36 35 32 32 29 2c 73 3d 6e 28 32 33 35 34 39 29 3b 63 6f 6e 73 74 20 63 3d 7b 65 76 65 6e 74 42 72 69 65 66 3a 22 2f 7b 6d 61 72 6b 65 74 7d 2f 7b 6c 6f 63 61 6c 69 7a 65 64 56 65 72 74 69 63 61 6c 4e 61 6d 65 7d 2f 65 76 65 6e 74 73 22 2c 6c 69 73 74 44 65 74 61 69 6c 73 3a 22 2f 7b 6d 61 72 6b Data Ascii: ction(){return C},e9:function(){return b},gi:function(){return m},o0:function(){return I},r$:function(){return h}});var r=n(22826),i=n(21789),o=n(857),a=n(86522),s=n(23549);const c={eventBrief:"/{market}/{localizedVerticalName}/events",listDetails:"/{mark
2025-01-10 15:23:10 UTC	3425	IN	Data Raw: 44 61 74 65 28 65 29 2c 6e 2c 72 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 30 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 22 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 28 72 2e 78 6e 2e 43 75 72 72 65 6e 74 51 75 6f 74 65 49 64 73 29 3f 3f 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 28 72 2e 78 6e 2e 43 61 72 64 53 69 7a 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 73 2e 4e 76 2e 5f 31 35 75 3a 72 65 74 75 72 6e 22 33 32 30 70 78 22 3b 63 61 73 65 20 73 2e 4e 76 2e 5f 31 78 5f 31 79 3a 72 65 74 75 72 6e 22 69 6e 69 74 69 61 6c 22 3b 63 61 73 65 20 73 2e 4e 76 2e 5f 31 78 5f 32 79 3a 72 65 74 75 72 6e Data Ascii: Date(e),n,r,void 0,void 0,!0)}catch(e){return""}}function j(e){return e.get(r.xn.CurrentQuoteIds)??[]}function G(e){return e.get(r.xn.CardSize)}function J(e,t){switch(e){case s.Nv._15u:return"320px";case s.Nv._1x_1y:return"initial";case s.Nv._1x_2y:return

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.24	59039	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:11 UTC	665	OUT	GET /bundles/v1/winWidgets/latest/money-info.c5ec602bd7f7b5dc3160.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:11 UTC	1242	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: j2ZaTWYTLqVPStZDyBJ97g== Last-Modified: Thu, 09 Jan 2025 14:24:24 GMT ETag: 0x8DD30B9511E68A5 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: dbbb9bce-e01e-0084-77a2-62806e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:11 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.5,b=1104872379,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.5 Akamai-Request-ID: 41db03bb Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.05be1cb8.1736522591.41db03bb Vary: Origin
2025-01-10 15:23:11 UTC	15142	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 6f 6e 65 79 2d 69 6e 66 6f 22 5d 2c 7b 39 31 34 35 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 4d 6f 6e 65 79 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 74 7d 2c 4d 6f 6e 65 79 49 6e 66 6f 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 74 7d 2c 4d 6f 6e 65 79 49 6e 66 6f 54 65 6d 70 6c 61 74 65 3a 66 75 6e 63 74 69 Data Ascii: 00006000(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["money-info"],{91457:function(t,e,i){"use strict";i.r(e),i.d(e,{MoneyInfo:function(){return Tt},MoneyInfoStyles:function(){return Ot},MoneyInfoTemplate:functi
2025-01-10 15:23:11 UTC	9446	IN	Data Raw: 61 74 65 29 2c 65 3d 74 2e 74 61 62 4c 69 73 74 44 65 74 61 69 6c 73 3f 2e 5b 63 2e 48 51 2e 57 61 74 63 68 6c 69 73 74 49 64 65 61 73 5d 3f 2e 6c 69 73 74 49 74 65 6d 73 3f 2e 5b 30 5d 3f 2e 71 75 6f 74 65 49 64 73 7c 7c 5b 5d 3b 69 66 28 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 68 69 73 2e 64 72 6f 70 43 68 61 72 74 44 61 74 61 28 63 2e 48 51 2e 57 61 74 63 68 6c 69 73 74 49 64 65 61 73 29 3b 63 6f 6e 73 74 20 72 3d 74 68 69 73 2e 73 74 61 74 65 2e 67 65 74 28 63 2e 78 6e 2e 4d 6f 6e 65 79 43 6f 6e 66 69 67 29 3b 74 72 79 7b 63 6f 6e 73 74 20 74 3d 61 77 61 69 74 28 61 73 79 6e 63 28 74 2c 65 2c 72 2c 6e 2c 61 29 3d 3e 7b 63 6f 6e 73 74 7b 67 65 74 43 68 61 72 74 3a 73 2c 43 68 61 72 74 50 72 6f 70 73 48 65 6c 70 65 72 3a 6f Data Ascii: ate),e=t.tabListDetails?.[c.HQ.WatchlistIdeas]?.listItems?.[0]?.quoteIds\|\|[];if(!e.length)return void this.dropChartData(c.HQ.WatchlistIdeas);const r=this.state.get(c.xn.MoneyConfig);try{const t=await(async(t,e,r,n,a)=>{const{getChart:s,ChartPropsHelper:o
2025-01-10 15:23:11 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 73 28 74 29 7b 63 6f 6e 73 74 20 65 3d 6a 28 74 68 69 73 2e 73 74 61 74 65 29 2c 69 3d 61 77 61 69 74 20 74 68 69 73 2e 67 65 74 51 75 6f 74 65 73 28 74 2c 65 29 3b 74 68 69 73 2e 73 74 61 74 65 2e 73 65 74 28 63 2e 78 6e 2e 43 75 72 72 65 6e 74 51 75 6f 74 65 49 64 73 2c 74 29 2c 74 68 69 73 2e 6d 65 72 67 65 4e 65 77 51 75 6f 74 65 73 44 61 74 61 28 69 29 7d 61 73 79 6e 63 20 75 70 64 61 74 65 43 68 61 72 74 73 28 74 29 7b 63 6f 6e 73 74 20 65 3d 5f 28 74 68 69 73 2e 73 74 61 74 65 29 2c 69 3d 74 68 69 73 2e 75 73 65 43 68 61 72 74 73 46 72 6f 6d 51 75 6f 74 65 73 28 74 29 2c 72 3d 61 77 61 69 74 20 74 68 69 73 2e 67 65 74 43 68 61 72 74 73 28 74 68 69 73 2e 61 64 64 52 65 63 6f 6d 6d 65 6e 64 65 64 51 75 6f 74 65 49 64 73 Data Ascii: 00006000s(t){const e=j(this.state),i=await this.getQuotes(t,e);this.state.set(c.xn.CurrentQuoteIds,t),this.mergeNewQuotesData(i)}async updateCharts(t){const e=_(this.state),i=this.useChartsFromQuotes(t),r=await this.getCharts(this.addRecommendedQuoteIds
2025-01-10 15:23:11 UTC	8204	IN	Data Raw: 3d 74 68 69 73 2e 68 69 64 65 43 6c 69 63 6b 48 61 6e 64 6c 65 72 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 67 6f 54 6f 50 65 72 73 6f 6e 61 6c 69 7a 65 53 65 74 74 69 6e 67 73 48 61 6e 64 6c 65 72 53 63 6f 70 65 64 3d 74 68 69 73 2e 67 6f 54 6f 50 65 72 73 6f 6e 61 6c 69 7a 65 53 65 74 74 69 6e 67 73 48 61 6e 64 6c 65 72 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 74 75 72 6e 4f 66 66 57 69 64 67 65 74 73 52 65 67 69 6f 6e 43 6c 69 63 6b 48 61 6e 64 6c 65 72 53 63 6f 70 65 64 3d 28 29 3d 3e 74 68 69 73 2e 74 75 72 6e 4f 66 66 57 69 64 67 65 74 73 52 65 67 69 6f 6e 43 61 6c 6c 62 61 63 6b 26 26 74 68 69 73 2e 74 75 72 6e 4f 66 66 57 69 64 67 65 74 73 52 65 67 69 6f 6e 43 61 6c 6c 62 61 63 6b 28 29 2c 74 68 69 73 2e 6d 61 6e 61 67 65 57 69 Data Ascii: =this.hideClickHandler.bind(this),this.goToPersonalizeSettingsHandlerScoped=this.goToPersonalizeSettingsHandler.bind(this),this.turnOffWidgetsRegionClickHandlerScoped=()=>this.turnOffWidgetsRegionCallback&&this.turnOffWidgetsRegionCallback(),this.manageWi
2025-01-10 15:23:11 UTC	8925	IN	Data Raw: 30 30 30 30 32 32 44 31 0d 0a 39 32 39 32 39 7d 2e 73 6f 6c 69 64 2d 62 67 2d 77 69 64 67 65 74 7b 2d 2d 71 75 6f 74 65 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 39 32 39 32 39 7d 2e 73 6f 6c 69 64 2d 62 67 2d 77 69 64 67 65 74 20 72 65 73 70 6f 6e 73 69 76 65 2d 73 64 2d 63 61 72 64 3a 3a 70 61 72 74 28 63 73 2d 73 64 2d 63 61 72 64 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 33 33 33 33 33 7d 2e 72 75 62 79 2d 66 65 65 64 20 72 65 73 70 6f 6e 73 69 76 65 2d 73 64 2d 63 61 72 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 34 37 34 42 35 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 33 31 2c 33 31 2c 33 31 2c 30 2e 37 29 7d 60 2c 4c 74 3d 46 74 2e 69 60 20 3a 68 6f 73 74 7b 77 69 64 74 68 3a 61 75 74 6f 7d 60 2c 4f 74 3d 46 74 Data Ascii: 000022D192929}.solid-bg-widget{--quote-hover-background:#292929}.solid-bg-widget responsive-sd-card::part(cs-sd-card){background:#333333}.ruby-feed responsive-sd-card{border-color:#474B50;background:rgba(31,31,31,0.7)}`,Lt=Ft.i` :host{width:auto}`,Ot=Ft
2025-01-10 15:23:11 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 69 73 20 6e 6f 74 20 69 6e 20 74 68 65 20 66 65 65 64 20 66 6f 72 20 22 24 7b 69 7d 22 60 29 3b 63 6f 6e 73 74 7b 65 76 65 6e 74 4c 65 76 65 6c 3a 6e 2c 65 6e 74 69 74 79 49 64 65 6e 74 69 66 69 65 72 3a 73 7d 3d 72 2c 6f 3d 28 30 2c 67 2e 43 4a 29 28 6e 29 3f 61 5b 73 5d 3a 76 6f 69 64 20 30 2c 63 3d 7b 63 61 72 64 53 69 7a 65 3a 68 2c 73 69 67 6e 61 74 75 72 65 3a 74 68 69 73 2e 67 65 74 54 61 62 53 69 67 6e 61 74 75 72 65 28 74 2c 69 29 2c 74 65 6c 65 6d 65 74 72 79 4f 62 6a 65 63 74 3a 74 68 69 73 2e 74 61 62 54 65 6c 65 6d 65 74 72 79 4f 62 6a 65 63 74 2c 74 61 62 4e 61 6d 65 3a 69 2c 65 78 70 65 72 69 65 6e 63 65 4e 61 6d 65 3a 64 2c 65 76 65 6e 74 42 72 69 65 66 44 61 74 61 3a 72 2c 71 75 6f 74 65 49 74 65 6d 3a 6f 7d Data Ascii: 00004000is not in the feed for "${i}"`);const{eventLevel:n,entityIdentifier:s}=r,o=(0,g.CJ)(n)?a[s]:void 0,c={cardSize:h,signature:this.getTabSignature(t,i),telemetryObject:this.tabTelemetryObject,tabName:i,experienceName:d,eventBriefData:r,quoteItem:o}
2025-01-10 15:23:11 UTC	12	IN	Data Raw: 73 2e 6f 70 65 6e 4e 65 77 54 0d 0a Data Ascii: s.openNewT
2025-01-10 15:23:11 UTC	7961	IN	Data Raw: 30 30 30 30 31 46 30 44 0d 0a 61 62 28 65 29 7d 67 65 6e 65 72 61 74 65 49 6e 74 65 72 65 73 74 4f 70 74 69 6f 6e 73 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 63 61 72 64 53 69 7a 65 3d 3d 3d 61 2e 4e 76 2e 5f 31 78 5f 33 79 3f 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 65 72 50 72 6f 76 69 64 65 72 2e 63 6f 6e 66 69 67 2e 6e 75 6d 62 65 72 4f 66 4f 70 74 69 6f 6e 73 4c 61 72 67 65 3a 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 65 72 50 72 6f 76 69 64 65 72 2e 63 6f 6e 66 69 67 2e 6e 75 6d 62 65 72 4f 66 4f 70 74 69 6f 6e 73 2c 69 3d 74 2e 74 61 62 4c 69 73 74 44 65 74 61 69 6c 73 3f 2e 5b 72 2e 48 51 2e 53 75 67 67 65 73 74 65 64 5d 3f 2e 71 75 6f 74 65 49 74 65 6d 73 3f 2e 73 6c 69 63 65 28 30 2c 65 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 69 3f 2e Data Ascii: 00001F0Dab(e)}generateInterestOptions(t){const e=this.cardSize===a.Nv._1x_3y?this.transformerProvider.config.numberOfOptionsLarge:this.transformerProvider.config.numberOfOptions,i=t.tabListDetails?.[r.HQ.Suggested]?.quoteItems?.slice(0,e)\|\|[];return i?.
2025-01-10 15:23:11 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.24	59041	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:11 UTC	672	OUT	GET /bundles/v1/winWidgets/latest/common-sports-lib.cf9f764561464dba4117.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:11 UTC	1201	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: IRL1XrxU1NwjoJLB6kAMXg== Last-Modified: Fri, 20 Dec 2024 20:40:13 GMT ETag: 0x8DD213680F57D32 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: b1543fea-101e-00b3-8040-5c1bd0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:11 GMT Content-Length: 14720 Connection: close Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.6,b=69548134,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=1, origin; dur=0, cdntime; dur=1, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.6 Akamai-Request-ID: 4253866 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.06be1cb8.1736522591.4253866 Vary: Origin
2025-01-10 15:23:11 UTC	14720	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 73 70 6f 72 74 73 2d 6c 69 62 22 5d 2c 7b 33 37 30 35 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 65 29 7b 65 2e 64 28 6f 2c 7b 55 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 2c 53 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 2c 54 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 7d 2c 4a 35 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 2c 4f 37 3a 66 75 6e 63 74 Data Ascii: "use strict";(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["common-sports-lib"],{37050:function(t,o,e){e.d(o,{Us:function(){return T},Sv:function(){return E},T4:function(){return M},J5:function(){return y},O7:funct

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.24	59042	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:11 UTC	666	OUT	GET /bundles/v1/winWidgets/latest/sports-info.f2b9f959af2e127821a1.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:11 UTC	1238	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: B/fKQZcu1Jq7emfutiiMwA== Last-Modified: Tue, 07 Jan 2025 15:57:40 GMT ETag: 0x8DD2F3403952DC7 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: cfd6460a-e01e-00e8-201d-61c389000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:11 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.7,b=54509061,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=1, origin; dur=0, cdntime; dur=1, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.7 Akamai-Request-ID: 33fbe05 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.07be1cb8.1736522591.33fbe05 Vary: Origin
2025-01-10 15:23:11 UTC	15146	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 70 6f 72 74 73 2d 69 6e 66 6f 22 5d 2c 7b 38 30 30 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 53 70 6f 72 74 73 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 7d 2c 53 70 6f 72 74 73 49 6e 66 6f 53 74 79 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 65 7d 2c 53 70 6f 72 74 73 49 6e 66 6f 54 65 6d 70 6c 61 74 65 3a 66 75 6e Data Ascii: 00006000(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["sports-info"],{80051:function(e,t,i){"use strict";i.r(t),i.d(t,{SportsInfo:function(){return W},SportsInfoStyles:function(){return ie},SportsInfoTemplate:fun
2025-01-10 15:23:11 UTC	9442	IN	Data Raw: 6d 65 49 64 3a 61 2c 74 65 61 6d 49 64 3a 6f 7d 7d 65 6c 73 65 7b 63 6f 6e 73 74 5b 74 2c 69 2c 72 2c 6e 2c 73 5d 3d 74 68 69 73 2e 70 72 65 76 69 65 77 54 79 70 65 2e 73 70 6c 69 74 28 2f 5b 3a 5f 5d 2f 29 3b 65 3d 7b 2e 2e 2e 65 2c 73 65 67 6d 65 6e 74 3a 74 2c 73 63 65 6e 61 72 69 6f 3a 69 2c 6c 65 61 67 75 65 49 64 3a 72 2c 67 61 6d 65 49 64 3a 6e 2c 74 65 61 6d 49 64 3a 73 7d 7d 72 65 74 75 72 6e 20 65 2e 6c 65 61 67 75 65 49 64 3f 28 22 78 22 21 3d 3d 65 2e 67 61 6d 65 49 64 26 26 22 78 22 21 3d 3d 65 2e 74 65 61 6d 49 64 7c 7c 28 65 2e 67 61 6d 65 49 64 3d 76 6f 69 64 20 30 2c 65 2e 74 65 61 6d 49 64 3d 76 6f 69 64 20 30 29 2c 65 29 3a 76 6f 69 64 20 30 7d 67 65 74 45 6e 74 69 74 79 49 64 46 72 6f 6d 50 72 65 76 69 65 77 54 79 70 65 28 65 29 7b 6c Data Ascii: meId:a,teamId:o}}else{const[t,i,r,n,s]=this.previewType.split(/[:_]/);e={...e,segment:t,scenario:i,leagueId:r,gameId:n,teamId:s}}return e.leagueId?("x"!==e.gameId&&"x"!==e.teamId\|\|(e.gameId=void 0,e.teamId=void 0),e):void 0}getEntityIdFromPreviewType(e){l
2025-01-10 15:23:11 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 63 61 74 69 6f 6e 54 6f 61 73 74 56 69 65 77 4d 6f 64 65 6c 7d 22 0a 20 20 20 20 3e 3c 2f 66 65 65 64 73 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 74 6f 61 73 74 3e 0a 60 2c 71 3d 4c 2e 64 79 60 0a 20 20 20 20 3c 73 70 6f 72 74 73 2d 68 69 64 65 70 6f 70 75 70 0a 20 20 20 20 20 20 20 20 3a 76 69 65 77 4d 6f 64 65 6c 3d 22 24 7b 65 3d 3e 65 2e 76 69 65 77 3f 2e 76 69 65 77 4d 6f 64 65 6c 2e 68 69 64 65 50 6f 70 75 70 56 69 65 77 4d 6f 64 65 6c 7d 22 0a 20 20 20 20 20 20 20 20 3a 69 73 48 69 64 65 50 6f 70 75 70 4f 70 65 6e 3d 22 24 7b 65 3d 3e 65 2e 69 73 48 69 64 65 50 6f 70 75 70 4f 70 65 6e 7d 22 0a 20 20 20 20 3e 3c 2f 73 70 6f 72 74 73 2d 68 69 64 65 70 6f 70 75 70 3e 0a 60 2c 51 3d 4c 2e 64 79 60 0a 20 20 20 20 3c 64 69 Data Ascii: 00006000cationToastViewModel}" ></feeds-notification-toast>`,q=L.dy` <sports-hidepopup :viewModel="${e=>e.view?.viewModel.hidePopupViewModel}" :isHidePopupOpen="${e=>e.isHidePopupOpen}" ></sports-hidepopup>`,Q=L.dy` <di
2025-01-10 15:23:11 UTC	8204	IN	Data Raw: 72 65 74 75 72 6e 20 77 7d 7d 29 3b 76 61 72 20 72 3d 69 28 33 37 30 35 30 29 2c 6e 3d 69 28 37 36 36 31 31 29 2c 73 3d 69 28 38 30 35 30 31 29 2c 61 3d 69 28 31 36 37 35 34 29 2c 6f 3d 69 28 39 33 35 37 30 29 2c 63 3d 69 28 32 31 37 38 39 29 2c 64 3d 69 28 39 35 31 35 33 29 2c 6c 3d 69 28 37 34 37 36 29 2c 70 3d 69 28 38 38 38 32 36 29 3b 63 6f 6e 73 74 20 68 3d 7b 5b 72 2e 6d 57 2e 4c 65 61 64 65 72 62 6f 61 72 64 5d 3a 72 2e 6e 54 2e 4c 65 61 64 65 72 62 6f 61 72 64 2c 5b 72 2e 6d 57 2e 43 72 69 63 6b 65 74 5d 3a 72 2e 6e 54 2e 53 70 6f 72 74 73 43 72 69 63 6b 65 74 2c 5b 72 2e 6d 57 2e 54 65 6e 6e 69 73 5d 3a 72 2e 6e 54 2e 53 70 6f 72 74 73 54 65 6e 6e 69 73 2c 5b 72 2e 6d 57 2e 53 69 64 65 42 79 53 69 64 65 5d 3a 72 2e 6e 54 2e 53 70 6f 72 74 73 4d Data Ascii: return w}});var r=i(37050),n=i(76611),s=i(80501),a=i(16754),o=i(93570),c=i(21789),d=i(95153),l=i(7476),p=i(88826);const h={[r.mW.Leaderboard]:r.nT.Leaderboard,[r.mW.Cricket]:r.nT.SportsCricket,[r.mW.Tennis]:r.nT.SportsTennis,[r.mW.SideBySide]:r.nT.SportsM
2025-01-10 15:23:11 UTC	15889	IN	Data Raw: 30 30 30 30 33 45 30 35 0d 0a 74 2c 74 65 6c 65 6d 65 74 72 79 43 6f 6e 73 74 61 6e 74 73 3a 74 68 69 73 2e 74 65 6c 65 6d 65 74 72 79 43 6f 6e 73 74 61 6e 74 73 7d 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 72 2e 6e 54 2e 53 70 6f 72 74 73 4d 61 74 63 68 4c 69 73 74 3a 7b 74 68 69 73 2e 72 65 61 73 6f 6e 54 65 78 74 3d 74 68 69 73 2e 69 73 52 65 61 73 6f 6e 54 65 78 74 45 6e 61 62 6c 65 64 28 69 29 3f 74 68 69 73 2e 63 72 65 61 74 65 52 65 61 73 6f 6e 54 65 78 74 28 65 29 3a 22 22 3b 63 6f 6e 73 74 20 72 3d 7b 2e 2e 2e 61 2c 66 6f 6c 6c 6f 77 65 64 53 70 6f 72 74 73 3a 6e 2c 6e 75 6d 62 65 72 4f 66 4d 61 74 63 68 65 73 3a 28 30 2c 75 2e 6d 55 29 28 69 2c 74 68 69 73 2e 6d 61 74 63 68 55 58 54 79 70 65 2c 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 65 Data Ascii: 00003E05t,telemetryConstants:this.telemetryConstants};switch(t){case r.nT.SportsMatchList:{this.reasonText=this.isReasonTextEnabled(i)?this.createReasonText(e):"";const r={...a,followedSports:n,numberOfMatches:(0,u.mU)(i,this.matchUXType,this.transforme
2025-01-10 15:23:11 UTC	11103	IN	Data Raw: 30 30 30 30 32 42 35 33 0d 0a 35 29 29 29 29 2c 6f 28 61 28 22 53 70 6f 72 74 73 4d 61 72 63 68 6d 61 64 6e 65 73 73 22 29 2c 28 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 69 2e 65 28 22 63 6f 6d 6d 6f 6e 2d 73 65 67 6d 65 6e 74 73 22 29 2c 69 2e 65 28 22 63 6f 6d 6d 6f 6e 2d 66 65 65 64 2d 6c 69 62 73 22 29 2c 69 2e 65 28 22 63 6f 6d 6d 6f 6e 2d 63 73 63 6f 72 65 22 29 2c 69 2e 65 28 22 63 6f 6d 6d 6f 6e 2d 73 70 6f 72 74 73 2d 69 6e 66 6f 2d 6d 61 74 63 68 22 29 2c 69 2e 65 28 22 73 70 6f 72 74 73 2d 6d 61 72 63 68 6d 61 64 6e 65 73 73 22 29 5d 29 2e 74 68 65 6e 28 69 2e 62 69 6e 64 28 69 2c 31 32 30 38 34 29 29 29 29 2c 6f 28 61 28 22 53 70 6f 72 74 73 53 70 6f 74 6c 69 67 68 74 22 29 2c 28 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 69 Data Ascii: 00002B535)))),o(a("SportsMarchmadness"),(()=>Promise.all([i.e("common-segments"),i.e("common-feed-libs"),i.e("common-cscore"),i.e("common-sports-info-match"),i.e("sports-marchmadness")]).then(i.bind(i,12084)))),o(a("SportsSpotlight"),(()=>Promise.all([i
2025-01-10 15:23:11 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.24	59043	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:11 UTC	755	OUT	GET /bundles/v1/winWidgets/latest/libs_ad-service_dist_CookieConsentService_js-libs_ad-service_dist_CookieService_js-libs_ad-se-22340a.901222ed36abf8327ebb.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:11 UTC	1238	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 4XON6zg0/8JMcbe/E1Ylxg== Last-Modified: Fri, 03 Jan 2025 22:12:44 GMT ETag: 0x8DD2C43BF9FECAA Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 66c7679f-a01e-00eb-312e-5ec38f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:11 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.13,b=15082077,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=0, origin; dur=0, cdntime; dur=0, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.13 Akamai-Request-ID: e6225d Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.0dbe1cb8.1736522591.e6225d Vary: Origin
2025-01-10 15:23:11 UTC	15146	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6c 69 62 73 5f 61 64 2d 73 65 72 76 69 63 65 5f 64 69 73 74 5f 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 53 65 72 76 69 63 65 5f 6a 73 2d 6c 69 62 73 5f 61 64 2d 73 65 72 76 69 63 65 5f 64 69 73 74 5f 43 6f 6f 6b 69 65 53 65 72 76 69 63 65 5f 6a 73 2d 6c 69 62 73 5f 61 64 2d 73 65 2d 32 32 33 34 30 61 22 5d 2c 7b 33 31 36 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 64 28 74 2c 7b 55 46 3a 66 75 6e 63 74 69 6f 6e Data Ascii: 00006000"use strict";(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["libs_ad-service_dist_CookieConsentService_js-libs_ad-service_dist_CookieService_js-libs_ad-se-22340a"],{31643:function(e,t,i){i.d(t,{UF:function
2025-01-10 15:23:11 UTC	9442	IN	Data Raw: 65 64 56 32 3a 21 30 2c 74 69 74 6c 65 46 6f 6e 74 53 69 7a 65 3a 32 30 2c 63 75 73 74 6f 6d 53 74 79 6c 65 48 6f 76 65 72 65 64 3a 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 22 2c 6c 61 79 6f 75 74 3a 7b 6d 6f 64 65 3a 22 70 69 78 65 6c 22 2c 74 6f 70 3a 22 31 36 39 22 2c 7a 49 6e 64 65 78 3a 31 7d 7d 29 2c 72 65 3d 7b 63 6f 6e 66 69 67 54 79 70 65 3a 22 70 72 67 2d 73 63 61 72 64 73 68 6f 76 22 2c 72 65 67 69 6f 6e 3a 5b 2e 2e 2e 52 2e 46 67 5d 2c 74 65 6d 70 6c 61 74 65 3a 22 66 65 65 64 76 32 2d 74 65 6d 70 6c 61 74 65 22 2c 64 79 6e 61 6d 69 63 52 65 6e 64 65 72 69 6e 67 43 6f 6e 66 69 67 3a 28 29 3d 3e 6f 65 7d 3b 76 61 72 20 73 65 2c 6c 65 2c 64 65 2c 70 65 2c 6d 65 2c 67 65 3b 21 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: edV2:!0,titleFontSize:20,customStyleHovered:"text-decoration:underline;",layout:{mode:"pixel",top:"169",zIndex:1}}),re={configType:"prg-scardshov",region:[...R.Fg],template:"feedv2-template",dynamicRenderingConfig:()=>oe};var se,le,de,pe,me,ge;!function(e
2025-01-10 15:23:11 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 69 6d 61 67 65 72 79 72 69 76 65 72 22 29 2c 72 65 67 69 6f 6e 3a 5b 52 2e 79 70 2e 72 69 76 65 72 2c 52 2e 79 70 2e 72 65 73 72 69 76 65 72 2c 52 2e 79 70 2e 69 6e 66 6f 70 61 6e 65 2c 52 2e 79 70 2e 72 65 73 69 6e 66 6f 70 61 6e 65 5d 2c 74 65 6d 70 6c 61 74 65 3a 22 6d 73 6e 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 72 79 22 2c 73 75 70 70 6f 72 74 65 64 41 73 73 65 74 73 3a 5b 6c 2e 61 54 2e 70 72 69 63 65 2c 6c 2e 61 54 2e 73 61 6c 65 50 72 69 63 65 5d 2c 64 79 6e 61 6d 69 63 52 65 6e 64 65 72 69 6e 67 43 6f 6e 66 69 67 3a 65 3d 3e 22 69 6e 66 6f 70 61 6e 65 22 3d 3d 3d 65 2e 72 65 67 69 6f 6e 7c 7c 22 72 65 73 69 6e 66 6f 70 61 6e 65 22 3d 3d 3d 65 2e 72 65 67 69 6f 6e 3f 56 65 28 65 2c 22 61 6e 69 6d 61 74 65 64 69 Data Ascii: 00006000imageryriver"),region:[R.yp.river,R.yp.resriver,R.yp.infopane,R.yp.resinfopane],template:"msn-animated-imagery",supportedAssets:[l.aT.price,l.aT.salePrice],dynamicRenderingConfig:e=>"infopane"===e.region\|\|"resinfopane"===e.region?Ve(e,"animatedi
2025-01-10 15:23:11 UTC	8204	IN	Data Raw: 61 6d 65 3a 22 61 64 2d 74 69 74 6c 65 22 7d 5d 7d 5d 7d 2c 57 74 3d 7b 63 6f 6e 66 69 67 54 79 70 65 3a 22 70 72 67 2d 61 64 2d 73 68 2d 76 33 22 2c 72 65 67 69 6f 6e 3a 5b 2e 2e 2e 52 2e 46 67 5d 2c 74 65 6d 70 6c 61 74 65 3a 22 6d 73 6e 2d 73 61 6c 65 2d 68 69 67 68 6c 69 67 68 74 2d 76 33 22 2c 71 75 61 6c 69 66 69 65 72 3a 28 65 2c 74 29 3d 3e 28 30 2c 52 2e 55 65 29 28 74 29 2c 72 65 71 75 69 72 65 64 41 73 73 65 74 73 41 6c 6c 3a 5b 6c 2e 61 54 2e 70 72 69 63 65 2c 6c 2e 61 54 2e 73 61 6c 65 50 72 69 63 65 2c 6c 2e 61 54 2e 64 69 73 63 6f 75 6e 74 2c 6c 2e 61 54 2e 74 72 61 6e 73 70 61 72 65 6e 74 49 6d 61 67 65 5d 2c 64 69 73 63 6f 75 6e 74 54 68 72 65 73 68 6f 6c 64 3a 52 2e 58 50 2e 73 61 6c 65 48 69 67 68 6c 69 67 68 74 31 35 2c 6d 61 78 41 64 Data Ascii: ame:"ad-title"}]}]},Wt={configType:"prg-ad-sh-v3",region:[...R.Fg],template:"msn-sale-highlight-v3",qualifier:(e,t)=>(0,R.Ue)(t),requiredAssetsAll:[l.aT.price,l.aT.salePrice,l.aT.discount,l.aT.transparentImage],discountThreshold:R.XP.saleHighlight15,maxAd
2025-01-10 15:23:11 UTC	11217	IN	Data Raw: 30 30 30 30 32 42 43 35 0d 0a 70 6c 61 74 65 3a 22 6d 73 6e 2d 6e 61 74 69 76 65 2d 61 64 2d 63 74 61 2d 6f 6e 6c 79 22 2c 72 65 71 75 69 72 65 64 41 73 73 65 74 73 41 6c 6c 3a 5b 6c 2e 61 54 2e 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 5d 7d 2c 7b 63 6f 6e 66 69 67 54 79 70 65 3a 22 70 72 67 2d 61 64 2d 63 74 61 2d 61 72 22 2c 72 65 67 69 6f 6e 3a 5b 2e 2e 2e 52 2e 6d 73 5d 2c 74 65 6d 70 6c 61 74 65 3a 22 6d 73 6e 2d 6e 61 74 69 76 65 2d 61 64 2d 63 74 61 2d 61 72 74 69 63 6c 65 22 2c 72 65 71 75 69 72 65 64 41 73 73 65 74 73 41 6c 6c 3a 5b 6c 2e 61 54 2e 63 61 6c 6c 54 6f 41 63 74 69 6f 6e 5d 7d 2c 7b 63 6f 6e 66 69 67 54 79 70 65 3a 22 70 72 67 2d 61 64 2d 6c 6f 67 6f 2d 6f 6e 6c 79 22 2c 72 65 67 69 6f 6e 3a 5b 2e 2e 2e 52 2e 6d 73 5d 2c 74 65 6d 70 6c 61 Data Ascii: 00002BC5plate:"msn-native-ad-cta-only",requiredAssetsAll:[l.aT.callToAction]},{configType:"prg-ad-cta-ar",region:[...R.ms],template:"msn-native-ad-cta-article",requiredAssetsAll:[l.aT.callToAction]},{configType:"prg-ad-logo-only",region:[...R.ms],templa
2025-01-10 15:23:11 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.24	59044	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:11 UTC	755	OUT	GET /bundles/v1/winWidgets/latest/experiences_pill-wc_dist_PillWC_config_js-libs_feed-layout_dist_layout-templates_template-map-61dac2.c26cc3e9f1d78405be3d.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:12 UTC	1243	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: VBR1VX8K87PAS0ragUmfLg== Last-Modified: Thu, 09 Jan 2025 14:24:25 GMT ETag: 0x8DD30B951EA4A52 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 38293269-201e-004c-5ea2-622b4d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:11 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.36,b=379810383,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=1, clienttt; dur=6, origin; dur=0, cdntime; dur=6, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.36 Akamai-Request-ID: 16a3724f Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.24be1cb8.1736522591.16a3724f Vary: Origin
2025-01-10 15:23:12 UTC	15141	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 65 78 70 65 72 69 65 6e 63 65 73 5f 70 69 6c 6c 2d 77 63 5f 64 69 73 74 5f 50 69 6c 6c 57 43 5f 63 6f 6e 66 69 67 5f 6a 73 2d 6c 69 62 73 5f 66 65 65 64 2d 6c 61 79 6f 75 74 5f 64 69 73 74 5f 6c 61 79 6f 75 74 2d 74 65 6d 70 6c 61 74 65 73 5f 74 65 6d 70 6c 61 74 65 2d 6d 61 70 2d 36 31 64 61 63 32 22 5d 2c 7b 39 38 33 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3b 69 2e 64 28 74 2c 7b 45 3a 66 75 6e Data Ascii: 00006000(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["experiences_pill-wc_dist_PillWC_config_js-libs_feed-layout_dist_layout-templates_template-map-61dac2"],{98340:function(e,t,i){"use strict";var a;i.d(t,{E:fun
2025-01-10 15:23:12 UTC	9447	IN	Data Raw: 6c 6f 74 33 22 3b 0a 7d 0a 0a 3a 68 6f 73 74 28 5b 6c 61 79 6f 75 74 3d 22 43 33 22 5d 29 20 7b 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 20 73 6c 6f 74 32 20 73 6c 6f 74 33 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 20 73 6c 6f 74 32 20 73 6c 6f 74 33 22 3b 0a 7d 0a 0a 3a 68 6f 73 74 28 5b 6c 61 79 6f 75 74 3d 22 43 32 22 5d 29 20 7b 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 20 73 6c 6f 74 32 22 0a 20 20 20 20 20 20 20 20 22 73 6c 6f 74 31 20 73 6c 6f 74 33 22 3b 0a 7d 0a 0a 3a 68 6f 73 74 28 5b 6c 61 79 6f 75 74 3d 22 43 31 22 5d 29 20 7b 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d Data Ascii: lot3";}:host([layout="C3"]) { grid-template-areas: "slot1 slot2 slot3" "slot1 slot2 slot3";}:host([layout="C2"]) { grid-template-areas: "slot1 slot2" "slot1 slot3";}:host([layout="C1"]) { grid-template-
2025-01-10 15:23:12 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6e 74 3a 37 2c 72 6f 77 48 65 69 67 68 74 50 78 3a 7b 43 34 3a 28 30 2c 61 2e 58 39 29 28 34 29 2c 43 33 3a 28 30 2c 61 2e 58 39 29 28 34 29 2c 43 32 3a 28 30 2c 61 2e 58 39 29 28 36 29 2c 43 31 3a 28 30 2c 61 2e 58 39 29 28 31 32 29 7d 2c 63 6f 6c 57 69 64 74 68 50 78 3a 61 2e 43 37 2c 67 75 74 74 65 72 50 78 3a 61 2e 4f 4f 2c 63 61 72 64 53 6c 6f 74 73 3a 5b 7b 67 72 69 64 5f 61 72 65 61 3a 22 73 6c 6f 74 31 22 2c 6c 61 79 6f 75 74 73 3a 7b 43 34 3a 61 2e 4e 76 2e 5f 31 78 5f 32 79 2c 43 33 3a 61 2e 4e 76 2e 5f 31 78 5f 32 79 2c 43 32 3a 61 2e 4e 76 2e 5f 31 78 5f 32 79 2c 43 31 3a 61 2e 4e 76 2e 5f 31 78 5f 32 79 7d 2c 74 65 6c 65 6d 65 74 72 79 52 6f 77 43 6f 6c 3a 7b 43 34 3a 5b 31 2c 31 5d 2c 43 33 3a 5b 31 2c 31 5d 2c Data Ascii: 00006000nt:7,rowHeightPx:{C4:(0,a.X9)(4),C3:(0,a.X9)(4),C2:(0,a.X9)(6),C1:(0,a.X9)(12)},colWidthPx:a.C7,gutterPx:a.OO,cardSlots:[{grid_area:"slot1",layouts:{C4:a.Nv._1x_2y,C3:a.Nv._1x_2y,C2:a.Nv._1x_2y,C1:a.Nv._1x_2y},telemetryRowCol:{C4:[1,1],C3:[1,1],
2025-01-10 15:23:12 UTC	8204	IN	Data Raw: 61 6e 64 20 31 53 22 2c 76 6f 69 64 20 30 2c 7b 6d 69 73 73 69 6e 67 50 72 67 46 6c 69 67 68 74 73 3a 77 2e 6a 6f 69 6e 28 22 2c 22 29 2c 63 6f 6d 6d 6f 6e 50 72 6f 70 73 3a 76 7d 29 7d 7d 2c 38 30 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 7d 29 3b 76 61 72 20 61 3d 69 28 33 38 38 36 39 29 2c 72 3d 69 28 38 38 38 32 36 29 2c 73 3d 69 28 37 34 37 36 29 2c 6f 3d 69 28 33 31 35 35 38 29 2c 6e 3d 69 28 31 33 33 33 34 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 63 6f 6e 73 74 7b 74 69 65 72 3a 74 7d 3d 65 7c 7c 7b 7d 2c 7b 43 6c 69 65 6e 74 53 65 74 74 69 6e 67 73 3a 69 7d 3d 6e 2e 41 6c 3b 69 66 28 21 28 30 2c 6f 2e Data Ascii: and 1S",void 0,{missingPrgFlights:w.join(","),commonProps:v})}},8052:function(e,t,i){"use strict";i.d(t,{p:function(){return d}});var a=i(38869),r=i(88826),s=i(7476),o=i(31558),n=i(13334);function d(e){const{tier:t}=e\|\|{},{ClientSettings:i}=n.Al;if(!(0,o.
2025-01-10 15:23:12 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 6d 73 57 69 74 68 6f 75 74 41 75 74 68 28 6c 2e 6a 47 2e 55 73 65 72 49 64 7c 7c 72 26 26 60 6d 2d 24 7b 6c 2e 6a 47 2e 41 63 74 69 76 69 74 79 49 64 7d 60 2c 65 2c 21 31 2c 74 2c 61 2c 68 29 3b 74 68 69 73 2e 72 65 71 75 65 73 74 51 75 65 72 79 50 61 72 61 6d 73 3d 6e 65 77 20 64 2e 68 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 68 69 73 2e 72 65 71 75 65 73 74 51 75 65 72 79 50 61 72 61 6d 73 2e 73 65 74 28 73 5b 65 5d 2e 6b 65 79 2c 73 5b 65 5d 2e 76 61 6c 75 65 29 3b 69 66 28 6b 26 26 21 69 2e 73 74 61 72 74 29 74 68 69 73 2e 72 65 71 75 65 73 74 51 75 65 72 79 50 61 72 61 6d 73 2e 73 65 74 28 22 74 22 2c 6b 29 3b 65 6c 73 65 20 69 66 28 21 69 2e 64 69 73 61 62 6c 65 51 75 65 Data Ascii: 00006000amsWithoutAuth(l.jG.UserId\|\|r&&`m-${l.jG.ActivityId}`,e,!1,t,a,h);this.requestQueryParams=new d.h;for(let e=0;e<s.length;e++)this.requestQueryParams.set(s[e].key,s[e].value);if(k&&!i.start)this.requestQueryParams.set("t",k);else if(!i.disableQue
2025-01-10 15:23:12 UTC	8204	IN	Data Raw: 74 68 2c 63 61 70 74 69 6f 6e 3a 57 2e 74 69 74 6c 65 2c 66 6f 63 61 6c 52 65 67 69 6f 6e 3a 57 2e 66 6f 63 61 6c 52 65 67 69 6f 6e 2c 61 74 74 72 69 62 75 74 69 6f 6e 3a 57 2e 61 74 74 72 69 62 75 74 69 6f 6e 2c 75 72 6c 3a 57 2e 75 72 6c 2c 63 6f 6c 6f 72 53 61 6d 70 6c 65 73 3a 57 2e 63 6f 6c 6f 72 53 61 6d 70 6c 65 73 7d 5d 2c 63 6f 6c 6f 72 53 61 6d 70 6c 65 73 3a 6b 2c 76 69 64 65 6f 46 69 6c 65 73 3a 78 2c 70 75 62 6c 69 73 68 65 64 44 61 74 65 54 69 6d 65 3a 52 2c 6b 69 63 6b 65 72 3a 6d 2c 73 6f 75 72 63 65 48 72 65 66 3a 54 2c 64 65 73 74 69 6e 61 74 69 6f 6e 55 72 6c 3a 73 2c 73 6f 75 72 63 65 49 64 3a 49 2c 66 69 6e 61 6e 63 65 4d 65 74 61 64 61 74 61 3a 50 2c 69 73 4c 6f 63 61 6c 43 6f 6e 74 65 6e 74 3a 46 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: th,caption:W.title,focalRegion:W.focalRegion,attribution:W.attribution,url:W.url,colorSamples:W.colorSamples}],colorSamples:k,videoFiles:x,publishedDateTime:R,kicker:m,sourceHref:T,destinationUrl:s,sourceId:I,financeMetadata:P,isLocalContent:F}}}function
2025-01-10 15:23:12 UTC	8204	IN	Data Raw: 30 30 30 30 32 30 30 30 0d 0a 68 65 72 4d 61 70 4b 65 79 2c 65 29 7d 73 74 61 74 69 63 7b 74 68 69 73 2e 75 70 64 61 74 65 43 61 6c 65 6e 64 61 72 44 61 74 61 4b 65 79 3d 53 79 6d 62 6f 6c 28 22 75 70 64 61 74 65 43 61 6c 65 6e 64 61 72 44 61 74 61 22 29 7d 73 74 61 74 69 63 20 67 65 74 20 75 70 64 61 74 65 43 61 6c 65 6e 64 61 72 44 61 74 61 28 29 7b 72 65 74 75 72 6e 20 42 2e 47 71 2e 67 65 74 28 74 68 69 73 2e 75 70 64 61 74 65 43 61 6c 65 6e 64 61 72 44 61 74 61 4b 65 79 2c 28 28 29 3d 3e 6e 65 77 20 48 2e 43 28 22 55 70 64 61 74 65 43 61 6c 65 6e 64 61 72 44 61 74 61 22 29 29 29 7d 73 74 61 74 69 63 20 73 65 74 20 75 70 64 61 74 65 43 61 6c 65 6e 64 61 72 44 61 74 61 28 65 29 7b 42 2e 47 71 2e 73 65 74 28 74 68 69 73 2e 75 70 64 61 74 65 43 61 6c 65 Data Ascii: 00002000herMapKey,e)}static{this.updateCalendarDataKey=Symbol("updateCalendarData")}static get updateCalendarData(){return B.Gq.get(this.updateCalendarDataKey,(()=>new H.C("UpdateCalendarData")))}static set updateCalendarData(e){B.Gq.set(this.updateCale
2025-01-10 15:23:12 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 64 53 65 63 74 69 6f 6e 73 44 61 74 61 28 29 7b 72 65 74 75 72 6e 20 42 2e 47 71 2e 67 65 74 28 74 68 69 73 2e 77 65 61 74 68 65 72 52 61 6e 6b 65 64 53 65 63 74 69 6f 6e 73 44 61 74 61 4b 65 79 2c 28 28 29 3d 3e 6e 65 77 20 48 2e 43 28 22 77 65 61 74 68 65 72 52 61 6e 6b 65 64 53 65 63 74 69 6f 6e 73 44 61 74 61 22 29 29 29 7d 73 74 61 74 69 63 20 73 65 74 20 77 65 61 74 68 65 72 52 61 6e 6b 65 64 53 65 63 74 69 6f 6e 73 44 61 74 61 28 65 29 7b 42 2e 47 71 2e 73 65 74 28 74 68 69 73 2e 77 65 61 74 68 65 72 52 61 6e 6b 65 64 53 65 63 74 69 6f 6e 73 44 61 74 61 4b 65 79 2c 65 29 7d 7d 76 61 72 20 71 3d 69 28 37 38 36 37 32 29 2c 47 3d 69 28 32 31 37 38 39 29 3b 66 75 6e 63 74 69 6f 6e 20 56 28 65 29 7b 72 65 74 75 72 6e 20 Data Ascii: 00004000edSectionsData(){return B.Gq.get(this.weatherRankedSectionsDataKey,(()=>new H.C("weatherRankedSectionsData")))}static set weatherRankedSectionsData(e){B.Gq.set(this.weatherRankedSectionsDataKey,e)}}var q=i(78672),G=i(21789);function V(e){return
2025-01-10 15:23:12 UTC	12	IN	Data Raw: 73 65 4c 69 67 68 74 53 68 61 0d 0a Data Ascii: seLightSha
2025-01-10 15:23:12 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 64 6f 77 3a 69 2e 75 73 65 4c 69 67 68 74 53 68 61 64 6f 77 2c 6c 69 67 68 74 53 68 61 64 6f 77 56 61 6c 3a 69 2e 6c 69 67 68 74 53 68 61 64 6f 77 56 61 6c 2c 2e 2e 2e 65 2e 63 6f 6e 66 69 67 4f 70 74 69 6f 6e 73 7d 7d 2c 5b 4c 65 2e 55 2e 73 68 6f 70 70 69 6e 67 43 61 72 6f 75 73 65 6c 43 61 72 64 5d 3a 28 65 2c 74 2c 69 29 3d 3e 7b 74 2e 74 79 70 65 3d 3d 3d 24 2e 50 4c 2e 45 64 67 65 53 68 6f 70 70 69 6e 67 43 61 72 64 26 26 28 65 2e 63 6f 6e 66 69 67 4f 70 74 69 6f 6e 73 3d 69 2e 63 68 69 6c 64 45 78 70 65 72 69 65 6e 63 65 52 65 66 65 72 65 6e 63 65 73 57 43 3f 2e 65 64 67 65 53 68 6f 70 70 69 6e 67 43 61 72 64 29 2c 74 2e 74 79 70 65 3d 3d 3d 24 2e 50 4c 2e 53 68 6f 70 70 69 6e 67 43 61 72 6f 75 73 65 6c 26 26 69 2e 63 Data Ascii: 00006000dow:i.useLightShadow,lightShadowVal:i.lightShadowVal,...e.configOptions}},[Le.U.shoppingCarouselCard]:(e,t,i)=>{t.type===$.PL.EdgeShoppingCard&&(e.configOptions=i.childExperienceReferencesWC?.edgeShoppingCard),t.type===$.PL.ShoppingCarousel&&i.c

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.24	59045	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:11 UTC	673	OUT	GET /bundles/v1/winWidgets/latest/widgets-start-feed.8a3a9e79ea6f02f553b6.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:12 UTC	1311	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: 561h6I5TwRN0ANjVZMDKhQ== Last-Modified: Thu, 09 Jan 2025 14:24:25 GMT ETag: 0x8DD30B951914359 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 5c79391d-601e-00f8-1473-63ae91000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:11 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.37,b=8403649,c=g,n=US_NJ_SECAUCUS,o=20940],[c=c,n=US_NY_NEWYORK,o=20940],[a=20.209.52.65,c=o] Server-Timing: clientrtt; dur=2, clienttt; dur=107, origin; dur=30, cdntime; dur=77, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Miss from child, Miss from parent Akamai-Server-IP: 184.28.190.37 Akamai-Request-ID: 803ac1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.25be1cb8.1736522591.803ac1 Vary: Origin
2025-01-10 15:23:12 UTC	15073	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 77 69 64 67 65 74 73 2d 73 74 61 72 74 2d 66 65 65 64 22 5d 2c 7b 31 31 30 39 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 7b 54 6f 6f 6c 69 6e 67 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 69 7d 2c 57 69 64 67 65 74 54 6f 67 67 6c 65 41 63 74 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 74 7d 2c 57 69 64 67 65 74 73 53 74 61 Data Ascii: 00006000"use strict";(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["widgets-start-feed"],{11090:function(e,t,i){i.r(t),i.d(t,{ToolingInfo:function(){return gi},WidgetToggleActions:function(){return lt},WidgetsSta
2025-01-10 15:23:12 UTC	9515	IN	Data Raw: 73 68 20 65 76 65 6e 74 20 72 65 63 69 65 76 65 64 2c 20 62 75 74 20 66 65 65 64 20 69 73 20 6e 6f 74 20 72 65 66 72 65 73 68 65 64 20 62 65 63 61 75 73 65 20 64 61 73 68 62 6f 61 72 64 20 69 73 20 76 69 73 69 62 6c 65 22 29 3b 63 6f 6e 73 74 20 65 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 29 2c 74 3d 61 77 61 69 74 20 74 68 69 73 2e 69 73 50 61 67 65 4c 6f 61 64 52 65 71 75 69 72 65 64 28 29 3b 75 74 5b 44 2e 4d 49 5d 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 29 2d 65 2c 74 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3a 74 68 69 73 2e 72 65 66 72 65 73 68 46 65 65 64 28 21 30 2c 4e 65 2e 52 78 2e 42 67 74 61 73 6b 29 7d 2c 74 68 69 73 Data Ascii: sh event recieved, but feed is not refreshed because dashboard is visible");const e=Math.round(performance.now()),t=await this.isPageLoadRequired();ut[D.MI]=Math.round(performance.now())-e,t?window.location.reload():this.refreshFeed(!0,Ne.Rx.Bgtask)},this
2025-01-10 15:23:12 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 76 69 73 75 61 6c 52 65 61 64 69 6e 65 73 73 43 61 6c 6c 62 61 63 6b 3a 28 29 3d 3e 7b 7d 2c 72 65 66 72 65 73 68 46 65 65 64 43 61 6c 6c 62 61 63 6b 3a 74 68 69 73 2e 72 65 66 72 65 73 68 46 65 65 64 43 61 6c 6c 62 61 63 6b 2c 6f 76 65 72 72 69 64 65 43 6f 6c 75 6d 6e 4c 61 79 6f 75 74 3a 6d 74 7d 29 3b 74 68 69 73 2e 72 65 6d 6f 76 65 54 65 6c 65 6d 65 74 72 79 45 78 74 49 66 4e 65 65 64 65 64 28 72 29 3b 63 6f 6e 73 74 20 64 3d 61 77 61 69 74 20 74 68 69 73 2e 70 69 6e 43 61 72 64 28 72 2c 73 2c 69 2c 6e 29 2c 6c 3d 73 2e 77 70 6f 4d 65 74 61 64 61 74 61 26 26 73 2e 77 70 6f 4d 65 74 61 64 61 74 61 2e 69 73 52 65 63 6f 6d 6d 65 6e 64 65 64 3b 72 65 74 75 72 6e 20 64 26 26 6c 3f 74 68 69 73 2e 70 69 6e 6e 65 64 5a 6f 6e 65 Data Ascii: 00006000visualReadinessCallback:()=>{},refreshFeedCallback:this.refreshFeedCallback,overrideColumnLayout:mt});this.removeTelemetryExtIfNeeded(r);const d=await this.pinCard(r,s,i,n),l=s.wpoMetadata&&s.wpoMetadata.isRecommended;return d&&l?this.pinnedZone
2025-01-10 15:23:12 UTC	8204	IN	Data Raw: 69 64 67 65 74 53 65 74 74 69 6e 67 73 28 65 29 7b 74 72 79 7b 69 66 28 21 65 7c 7c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 5b 5d 3b 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 28 30 2c 5a 2e 59 6e 29 28 29 2e 67 65 74 28 65 29 26 26 28 74 2e 70 75 73 68 28 65 29 2c 28 30 2c 5a 2e 59 6e 29 28 29 2e 64 65 6c 65 74 65 28 65 29 29 7d 29 29 2c 74 2e 6c 65 6e 67 74 68 3e 30 26 26 61 77 61 69 74 20 55 65 2e 4e 2e 64 65 6c 65 74 65 46 72 6f 6d 50 64 70 28 6d 65 2e 4c 2e 57 69 64 67 65 74 2c 22 74 61 72 67 65 74 49 64 22 2c 74 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 22 46 6f 6c 6c 6f 77 22 29 3b 63 6f 6e 73 74 20 69 3d 61 77 61 69 74 20 55 65 2e 4e 2e 6d 75 74 65 57 69 64 67 65 74 28 65 2c 76 6f 69 64 20 30 29 3b 72 Data Ascii: idgetSettings(e){try{if(!e\|\|!e.length)return!1;const t=[];e.forEach((e=>{(0,Z.Yn)().get(e)&&(t.push(e),(0,Z.Yn)().delete(e))})),t.length>0&&await Ue.N.deleteFromPdp(me.L.Widget,"targetId",t,void 0,void 0,"Follow");const i=await Ue.N.muteWidget(e,void 0);r
2025-01-10 15:23:12 UTC	16384	IN	Data Raw: 30 30 30 30 35 38 33 43 0d 0a 75 6e 64 6f 50 69 6e 54 6f 61 73 74 42 75 74 74 6f 6e 53 74 72 69 6e 67 3a 6c 2c 65 6e 68 61 6e 63 65 64 54 6f 61 73 74 55 6e 64 6f 50 69 6e 54 6f 61 73 74 53 74 72 69 6e 67 3a 63 7d 3d 74 68 69 73 2e 73 74 72 69 6e 67 73 7c 7c 7b 7d 3b 72 65 74 75 72 6e 20 77 65 2e 68 2e 72 65 6e 64 65 72 54 6f 61 73 74 28 7b 69 64 3a 43 65 2e 70 2e 50 69 6e 2b 60 2d 24 7b 64 7d 60 2c 74 6f 61 73 74 54 79 70 65 3a 43 65 2e 70 2e 50 69 6e 2c 62 75 74 74 6f 6e 54 65 78 74 3a 6c 2c 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 74 68 69 73 2e 75 6e 70 69 6e 57 69 64 67 65 74 28 73 29 2c 69 6e 70 75 74 54 65 78 74 3a 63 2e 72 65 70 6c 61 63 65 28 22 7b 30 7d 22 2c 74 68 69 73 2e 63 61 72 64 54 79 70 65 54 6f 57 69 64 67 65 74 54 69 74 6c 65 28 73 29 29 2c Data Ascii: 0000583CundoPinToastButtonString:l,enhancedToastUndoPinToastString:c}=this.strings\|\|{};return we.h.renderToast({id:Ce.p.Pin+`-${d}`,toastType:Ce.p.Pin,buttonText:l,onClick:()=>this.unpinWidget(s),inputText:c.replace("{0}",this.cardTypeToWidgetTitle(s)),
2025-01-10 15:23:12 UTC	6216	IN	Data Raw: 7b 28 30 2c 43 74 2e 69 29 28 22 70 69 6e 6e 65 64 5a 6f 6e 65 22 29 7d 20 64 61 74 61 2d 74 3d 22 24 7b 65 3d 3e 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 70 69 6e 6e 65 64 5a 6f 6e 65 54 65 6c 65 6d 65 74 72 79 4f 62 6a 65 63 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 67 65 74 4d 65 74 61 64 61 74 61 54 61 67 28 29 7d 7d 22 20 3a 70 69 6e 6e 65 64 43 61 72 64 73 43 6f 6c 75 6d 6e 31 3d 22 24 7b 65 3d 3e 65 2e 70 69 6e 6e 65 64 43 61 72 64 73 43 6f 6c 75 6d 6e 31 46 6f 72 52 65 6e 64 65 72 7d 22 20 3a 70 69 6e 6e 65 64 43 61 72 64 73 43 6f 6c 75 6d 6e 32 3d 22 24 7b 5b 5d 7d 22 20 3a 70 69 6e 6e 65 64 43 61 72 64 73 43 6f 6c 75 6d 6e 33 3d 22 24 7b 5b 5d 7d 22 20 3a 70 69 6e 6e 65 64 43 61 Data Ascii: {(0,Ct.i)("pinnedZone")} data-t="${e=>{var t;return null===(t=e.pinnedZoneTelemetryObject)\|\|void 0===t?void 0:t.getMetadataTag()}}" :pinnedCardsColumn1="${e=>e.pinnedCardsColumn1ForRender}" :pinnedCardsColumn2="${[]}" :pinnedCardsColumn3="${[]}" :pinnedCa
2025-01-10 15:23:12 UTC	7134	IN	Data Raw: 30 30 30 30 31 42 44 32 0d 0a 72 65 64 29 2c 77 74 2e 64 79 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 24 7b 65 3d 3e 65 2e 65 6e 61 62 6c 65 52 65 64 75 63 65 48 65 61 64 65 72 26 26 22 22 21 3d 6f 69 28 65 29 3f 22 20 69 73 42 6f 61 72 64 73 2d 72 65 64 75 63 65 2d 68 65 61 64 65 72 2d 62 61 6e 6e 65 72 22 3a 22 22 7d 24 7b 65 3d 3e 65 2e 63 6f 6e 66 69 67 2e 65 6e 61 62 6c 65 48 65 72 6f 43 6f 6e 74 61 69 6e 65 72 3f 22 20 73 70 6f 74 6c 69 67 68 74 32 30 22 3a 22 22 7d 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 20 61 72 69 61 2d 72 65 6c 65 76 61 6e 74 3d 22 61 6c 6c 22 20 61 72 69 61 2d 61 74 6f 6d 69 63 3d 22 74 72 75 65 22 3e 24 7b 65 3d 3e 6f 69 28 65 29 7d 3c 2f 64 69 76 3e 60 Data Ascii: 00001BD2red),wt.dy`<div class="banner-container${e=>e.enableReduceHeader&&""!=oi(e)?" isBoards-reduce-header-banner":""}${e=>e.config.enableHeroContainer?" spotlight20":""}" aria-live="assertive" aria-relevant="all" aria-atomic="true">${e=>oi(e)}</div>`
2025-01-10 15:23:12 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.24	59046	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:11 UTC	671	OUT	GET /bundles/v1/winWidgets/latest/common-feed-libs.cad137bb0459e28c3b26.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:12 UTC	1240	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: wva/eFSdLk0KXh6/ITyvWQ== Last-Modified: Thu, 09 Jan 2025 14:24:23 GMT ETag: 0x8DD30B950C75B3E Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: edc83d5b-e01e-00a5-0ca2-620c65000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:11 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.46,b=45236896,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=2, clienttt; dur=9, origin; dur=0, cdntime; dur=9, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.46 Akamai-Request-ID: 2b242a0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.2ebe1cb8.1736522591.2b242a0 Vary: Origin
2025-01-10 15:23:12 UTC	15144	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 66 65 65 64 2d 6c 69 62 73 22 5d 2c 7b 37 30 39 39 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 41 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 63 6f 6e 73 74 20 69 3d 22 73 68 6f 77 4f 72 48 69 64 65 43 4f 6e 74 65 6e 74 42 61 64 67 65 22 7d 2c 32 38 34 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 59 3a 66 75 6e 63 74 Data Ascii: 00006000"use strict";(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["common-feed-libs"],{70992:function(e,t,n){n.d(t,{A:function(){return i}});const i="showOrHideCOntentBadge"},28443:function(e,t,n){n.d(t,{Y:funct
2025-01-10 15:23:12 UTC	9444	IN	Data Raw: 73 28 65 29 3b 72 65 74 75 72 6e 20 74 7c 7c 6e 7d 7d 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 68 69 6c 64 54 65 6d 70 6c 61 74 65 4d 61 70 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6f 6c 75 6d 6e 73 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 77 69 64 65 43 61 72 64 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 77 69 64 65 43 61 72 64 53 69 7a 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 63 74 69 6f 6e 54 72 Data Ascii: s(e);return t\|\|n}}(0,i.gn)([d.LO],h.prototype,"childTemplateMap",void 0),(0,i.gn)([d.LO],h.prototype,"columns",void 0),(0,i.gn)([d.LO],h.prototype,"wideCard",void 0),(0,i.gn)([d.LO],h.prototype,"wideCardSize",void 0),(0,i.gn)([d.LO],h.prototype,"sectionTr
2025-01-10 15:23:12 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6e 2e 72 65 70 6c 61 63 65 28 60 24 7b 72 7d 20 60 2c 60 24 7b 72 7d 2c 20 60 29 7d 72 65 74 75 72 6e 20 6e 7d 66 6f 72 6d 61 74 4d 6f 6e 74 68 44 61 79 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 72 6d 61 74 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 54 65 78 74 28 65 2c 69 2e 4d 6f 6e 74 68 44 61 79 2c 74 29 7d 66 6f 72 6d 61 74 4d 6f 6e 74 68 44 61 79 4e 75 6d 65 72 69 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 72 6d 61 74 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 54 65 78 74 28 65 2c 69 2e 4d 6f 6e 74 68 44 61 79 4e 75 6d 65 72 69 63 2c 74 29 7d 66 6f 72 6d 61 74 57 65 65 6b 53 68 6f 72 74 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 74 68 69 73 2e 66 6f 72 6d 61 74 44 61 74 65 54 69 6d 65 46 6f Data Ascii: 00006000n.replace(`${r} `,`${r}, `)}return n}formatMonthDay(e,t){return this.formatDateTimeFormatText(e,i.MonthDay,t)}formatMonthDayNumeric(e,t){return this.formatDateTimeFormatText(e,i.MonthDayNumeric,t)}formatWeekShort(e,t){let n=this.formatDateTimeFo
2025-01-10 15:23:12 UTC	8204	IN	Data Raw: 63 72 6f 6c 6c 50 72 65 76 69 65 77 3a 6e 2e 65 6e 61 62 6c 65 56 69 64 65 6f 43 61 72 64 53 63 72 6f 6c 6c 2c 65 6e 61 62 6c 65 46 61 73 74 65 72 50 6c 61 79 65 72 3a 6e 2e 65 6e 61 62 6c 65 46 61 73 74 65 72 50 6c 61 79 65 72 2c 65 6e 61 62 6c 65 56 69 64 65 6f 50 6f 73 74 53 63 72 6f 6c 6c 3a 6e 2e 65 6e 61 62 6c 65 56 69 64 65 6f 50 6f 73 74 53 63 72 6f 6c 6c 2c 64 69 73 61 62 6c 65 49 66 49 6e 66 6f 70 61 6e 65 45 78 69 73 74 73 3a 6e 2e 64 69 73 61 62 6c 65 56 69 64 65 6f 50 72 65 76 69 65 77 41 54 46 7d 3b 74 68 69 73 2e 76 69 64 65 6f 45 6c 65 6d 65 6e 74 26 26 28 74 68 69 73 2e 70 72 65 76 69 65 77 4d 61 6e 61 67 65 72 49 6e 73 74 61 6e 63 65 3d 73 2e 6c 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 69 29 2c 74 68 69 73 2e 70 72 65 76 69 65 77 4d 61 6e Data Ascii: crollPreview:n.enableVideoCardScroll,enableFasterPlayer:n.enableFasterPlayer,enableVideoPostScroll:n.enableVideoPostScroll,disableIfInfopaneExists:n.disableVideoPreviewATF};this.videoElement&&(this.previewManagerInstance=s.l.getInstance(i),this.previewMan
2025-01-10 15:23:12 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 72 64 3d 22 4d 69 63 72 6f 73 6f 66 74 46 65 65 64 43 61 72 64 22 2c 65 2e 43 6f 6d 70 61 6e 79 4e 65 77 73 43 61 72 64 3d 22 43 6f 6d 70 61 6e 79 4e 65 77 73 43 61 72 64 22 7d 28 69 7c 7c 28 69 3d 7b 7d 29 29 7d 2c 33 34 35 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 43 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 56 51 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 69 3d 6e 28 39 30 31 35 38 29 2c 72 3d 6e 28 36 32 38 34 36 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 3f 2e 6e 65 65 64 48 65 61 64 65 72 3f 3f 21 31 7d 63 61 74 63 68 28 65 29 Data Ascii: 00004000rd="MicrosoftFeedCard",e.CompanyNewsCard="CompanyNewsCard"}(i\|\|(i={}))},34595:function(e,t,n){n.d(t,{Ch:function(){return a},VQ:function(){return s}});var i=n(90158),r=n(62846);function a(e,t){if(function(e){try{return e?.needHeader??!1}catch(e)
2025-01-10 15:23:12 UTC	12	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 0d 0a Data Ascii: nction(){r
2025-01-10 15:23:12 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 74 75 72 6e 20 62 6e 2e 5f 59 7d 7d 29 3b 76 61 72 20 69 3d 6e 28 39 30 31 35 38 29 2c 72 3d 6e 28 31 36 32 33 33 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 28 30 2c 69 2e 64 77 29 28 22 66 65 74 63 68 41 64 73 22 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 6e 29 3d 3e 7b 61 28 65 2c 28 65 3d 3e 7b 74 28 65 29 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 28 30 2c 69 2e 64 77 29 28 22 67 65 74 41 70 70 4c 69 73 74 22 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 6e 29 3d 3e 7b 73 28 65 2c 28 65 3d 3e 7b 74 28 65 29 7d 29 29 Data Ascii: 00004000eturn bn._Y}});var i=n(90158),r=n(16233);function a(e,t){(0,i.dw)("fetchAds",e,t)}function o(e){return new Promise(((t,n)=>{a(e,(e=>{t(e)}))}))}function s(e,t){(0,i.dw)("getAppList",e,t)}function d(e){return new Promise(((t,n)=>{s(e,(e=>{t(e)}))
2025-01-10 15:23:12 UTC	12	IN	Data Raw: 7d 7d 3b 28 30 2c 77 2e 64 29 0d 0a Data Ascii: }};(0,w.d)
2025-01-10 15:23:12 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 65 3d 21 30 2c 74 2c 6e 2c 69 29 7b 63 6f 6e 73 74 20 72 3d 7b 70 61 72 74 6e 65 72 3a 70 74 2c 64 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 22 68 6f 6d 65 70 61 67 65 46 65 65 64 41 64 73 43 61 72 64 52 65 61 64 79 22 2c 70 61 72 61 6d 73 3a 41 74 28 65 2c 74 2c 6e 2c 69 29 7d 7d 3b 28 30 2c 77 2e 64 29 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 65 3d 21 30 2c 74 2c 6e 2c 69 29 7b 63 6f 6e 73 74 20 72 3d 69 3f 2e 73 63 72 65 65 6e 57 69 64 74 68 50 78 2f 69 3f 2e 73 63 72 65 65 6e 57 69 64 74 68 3b 72 65 74 75 72 6e 7b 73 6e 61 70 73 68 6f 74 3a 7b 61 6c 6c 6f 77 3a 65 26 26 21 21 69 3f 2e 73 63 72 65 65 6e 57 69 64 74 68 26 26 21 21 69 3f 2e 73 63 72 65 65 6e 48 65 69 67 68 74 Data Ascii: 00004000(r)}function It(e=!0,t,n,i){const r={partner:pt,data:{method:"homepageFeedAdsCardReady",params:At(e,t,n,i)}};(0,w.d)(r)}function At(e=!0,t,n,i){const r=i?.screenWidthPx/i?.screenWidth;return{snapshot:{allow:e&&!!i?.screenWidth&&!!i?.screenHeight
2025-01-10 15:23:12 UTC	12	IN	Data Raw: 22 2c 43 6f 6e 6e 65 63 74 69 0d 0a Data Ascii: ",Connecti

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.24	59048	184.28.190.83	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:13 UTC	671	OUT	GET /bundles/v1/winWidgets/latest/common-feed-libs.cad137bb0459e28c3b26.js HTTP/1.1 Host: assets.msn.com Connection: keep-alive sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Microsoft Edge";v="100", "Microsoft Edge WebView2";v="100" Origin: https://windows.msn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://windows.msn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:13 UTC	1241	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-MD5: wva/eFSdLk0KXh6/ITyvWQ== Last-Modified: Thu, 09 Jan 2025 14:24:23 GMT ETag: 0x8DD30B950C75B3E Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: edc83d5b-e01e-00a5-0ca2-620c65000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Fri, 10 Jan 2025 15:23:13 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=86400 Akamai-Request-BC: [a=184.28.190.20,b=122773697,c=g,n=US_NJ_SECAUCUS,o=20940] Server-Timing: clientrtt; dur=1, clienttt; dur=1, origin; dur=0, cdntime; dur=1, wpo;dur=0,1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.28.190.20 Akamai-Request-ID: 75160c1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://windows.msn.com report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.1} Cache-Control: public, no-transform, max-age=31535892 Timing-Allow-Origin: * Akamai-GRN: 0.14be1cb8.1736522593.75160c1 Vary: Origin
2025-01-10 15:23:13 UTC	15143	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 3d 73 65 6c 66 2e 77 69 6e 64 6f 77 73 4e 65 77 73 57 69 64 67 65 74 73 57 65 62 70 61 63 6b 43 68 75 6e 6b 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 2d 66 65 65 64 2d 6c 69 62 73 22 5d 2c 7b 37 30 39 39 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 41 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 63 6f 6e 73 74 20 69 3d 22 73 68 6f 77 4f 72 48 69 64 65 43 4f 6e 74 65 6e 74 42 61 64 67 65 22 7d 2c 32 38 34 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 59 3a 66 75 6e 63 74 Data Ascii: 00006000"use strict";(self.windowsNewsWidgetsWebpackChunks=self.windowsNewsWidgetsWebpackChunks\|\|[]).push([["common-feed-libs"],{70992:function(e,t,n){n.d(t,{A:function(){return i}});const i="showOrHideCOntentBadge"},28443:function(e,t,n){n.d(t,{Y:funct
2025-01-10 15:23:13 UTC	9445	IN	Data Raw: 65 73 28 65 29 3b 72 65 74 75 72 6e 20 74 7c 7c 6e 7d 7d 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 68 69 6c 64 54 65 6d 70 6c 61 74 65 4d 61 70 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6f 6c 75 6d 6e 73 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 77 69 64 65 43 61 72 64 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 77 69 64 65 43 61 72 64 53 69 7a 65 22 2c 76 6f 69 64 20 30 29 2c 28 30 2c 69 2e 67 6e 29 28 5b 64 2e 4c 4f 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 63 74 69 6f 6e 54 Data Ascii: es(e);return t\|\|n}}(0,i.gn)([d.LO],h.prototype,"childTemplateMap",void 0),(0,i.gn)([d.LO],h.prototype,"columns",void 0),(0,i.gn)([d.LO],h.prototype,"wideCard",void 0),(0,i.gn)([d.LO],h.prototype,"wideCardSize",void 0),(0,i.gn)([d.LO],h.prototype,"sectionT
2025-01-10 15:23:13 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6e 2e 72 65 70 6c 61 63 65 28 60 24 7b 72 7d 20 60 2c 60 24 7b 72 7d 2c 20 60 29 7d 72 65 74 75 72 6e 20 6e 7d 66 6f 72 6d 61 74 4d 6f 6e 74 68 44 61 79 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 72 6d 61 74 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 54 65 78 74 28 65 2c 69 2e 4d 6f 6e 74 68 44 61 79 2c 74 29 7d 66 6f 72 6d 61 74 4d 6f 6e 74 68 44 61 79 4e 75 6d 65 72 69 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 72 6d 61 74 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 54 65 78 74 28 65 2c 69 2e 4d 6f 6e 74 68 44 61 79 4e 75 6d 65 72 69 63 2c 74 29 7d 66 6f 72 6d 61 74 57 65 65 6b 53 68 6f 72 74 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 74 68 69 73 2e 66 6f 72 6d 61 74 44 61 74 65 54 69 6d 65 46 6f Data Ascii: 00006000n.replace(`${r} `,`${r}, `)}return n}formatMonthDay(e,t){return this.formatDateTimeFormatText(e,i.MonthDay,t)}formatMonthDayNumeric(e,t){return this.formatDateTimeFormatText(e,i.MonthDayNumeric,t)}formatWeekShort(e,t){let n=this.formatDateTimeFo
2025-01-10 15:23:13 UTC	8204	IN	Data Raw: 63 72 6f 6c 6c 50 72 65 76 69 65 77 3a 6e 2e 65 6e 61 62 6c 65 56 69 64 65 6f 43 61 72 64 53 63 72 6f 6c 6c 2c 65 6e 61 62 6c 65 46 61 73 74 65 72 50 6c 61 79 65 72 3a 6e 2e 65 6e 61 62 6c 65 46 61 73 74 65 72 50 6c 61 79 65 72 2c 65 6e 61 62 6c 65 56 69 64 65 6f 50 6f 73 74 53 63 72 6f 6c 6c 3a 6e 2e 65 6e 61 62 6c 65 56 69 64 65 6f 50 6f 73 74 53 63 72 6f 6c 6c 2c 64 69 73 61 62 6c 65 49 66 49 6e 66 6f 70 61 6e 65 45 78 69 73 74 73 3a 6e 2e 64 69 73 61 62 6c 65 56 69 64 65 6f 50 72 65 76 69 65 77 41 54 46 7d 3b 74 68 69 73 2e 76 69 64 65 6f 45 6c 65 6d 65 6e 74 26 26 28 74 68 69 73 2e 70 72 65 76 69 65 77 4d 61 6e 61 67 65 72 49 6e 73 74 61 6e 63 65 3d 73 2e 6c 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 69 29 2c 74 68 69 73 2e 70 72 65 76 69 65 77 4d 61 6e Data Ascii: crollPreview:n.enableVideoCardScroll,enableFasterPlayer:n.enableFasterPlayer,enableVideoPostScroll:n.enableVideoPostScroll,disableIfInfopaneExists:n.disableVideoPreviewATF};this.videoElement&&(this.previewManagerInstance=s.l.getInstance(i),this.previewMan
2025-01-10 15:23:13 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 72 64 3d 22 4d 69 63 72 6f 73 6f 66 74 46 65 65 64 43 61 72 64 22 2c 65 2e 43 6f 6d 70 61 6e 79 4e 65 77 73 43 61 72 64 3d 22 43 6f 6d 70 61 6e 79 4e 65 77 73 43 61 72 64 22 7d 28 69 7c 7c 28 69 3d 7b 7d 29 29 7d 2c 33 34 35 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 43 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 56 51 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 69 3d 6e 28 39 30 31 35 38 29 2c 72 3d 6e 28 36 32 38 34 36 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 3f 2e 6e 65 65 64 48 65 61 64 65 72 3f 3f 21 31 7d 63 61 74 63 68 28 65 29 Data Ascii: 00004000rd="MicrosoftFeedCard",e.CompanyNewsCard="CompanyNewsCard"}(i\|\|(i={}))},34595:function(e,t,n){n.d(t,{Ch:function(){return a},VQ:function(){return s}});var i=n(90158),r=n(62846);function a(e,t){if(function(e){try{return e?.needHeader??!1}catch(e)
2025-01-10 15:23:13 UTC	12	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 0d 0a Data Ascii: nction(){r
2025-01-10 15:23:13 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 74 75 72 6e 20 62 6e 2e 5f 59 7d 7d 29 3b 76 61 72 20 69 3d 6e 28 39 30 31 35 38 29 2c 72 3d 6e 28 31 36 32 33 33 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 28 30 2c 69 2e 64 77 29 28 22 66 65 74 63 68 41 64 73 22 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 6e 29 3d 3e 7b 61 28 65 2c 28 65 3d 3e 7b 74 28 65 29 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 28 30 2c 69 2e 64 77 29 28 22 67 65 74 41 70 70 4c 69 73 74 22 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 6e 29 3d 3e 7b 73 28 65 2c 28 65 3d 3e 7b 74 28 65 29 7d 29 29 Data Ascii: 00004000eturn bn._Y}});var i=n(90158),r=n(16233);function a(e,t){(0,i.dw)("fetchAds",e,t)}function o(e){return new Promise(((t,n)=>{a(e,(e=>{t(e)}))}))}function s(e,t){(0,i.dw)("getAppList",e,t)}function d(e){return new Promise(((t,n)=>{s(e,(e=>{t(e)}))
2025-01-10 15:23:13 UTC	12	IN	Data Raw: 7d 7d 3b 28 30 2c 77 2e 64 29 0d 0a Data Ascii: }};(0,w.d)
2025-01-10 15:23:13 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 65 3d 21 30 2c 74 2c 6e 2c 69 29 7b 63 6f 6e 73 74 20 72 3d 7b 70 61 72 74 6e 65 72 3a 70 74 2c 64 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 22 68 6f 6d 65 70 61 67 65 46 65 65 64 41 64 73 43 61 72 64 52 65 61 64 79 22 2c 70 61 72 61 6d 73 3a 41 74 28 65 2c 74 2c 6e 2c 69 29 7d 7d 3b 28 30 2c 77 2e 64 29 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 65 3d 21 30 2c 74 2c 6e 2c 69 29 7b 63 6f 6e 73 74 20 72 3d 69 3f 2e 73 63 72 65 65 6e 57 69 64 74 68 50 78 2f 69 3f 2e 73 63 72 65 65 6e 57 69 64 74 68 3b 72 65 74 75 72 6e 7b 73 6e 61 70 73 68 6f 74 3a 7b 61 6c 6c 6f 77 3a 65 26 26 21 21 69 3f 2e 73 63 72 65 65 6e 57 69 64 74 68 26 26 21 21 69 3f 2e 73 63 72 65 65 6e 48 65 69 67 68 74 Data Ascii: 00004000(r)}function It(e=!0,t,n,i){const r={partner:pt,data:{method:"homepageFeedAdsCardReady",params:At(e,t,n,i)}};(0,w.d)(r)}function At(e=!0,t,n,i){const r=i?.screenWidthPx/i?.screenWidth;return{snapshot:{allow:e&&!!i?.screenWidth&&!!i?.screenHeight
2025-01-10 15:23:13 UTC	12	IN	Data Raw: 22 2c 43 6f 6e 6e 65 63 74 69 0d 0a Data Ascii: ",Connecti

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.24	59047	20.189.173.11	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:13 UTC	473	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1736522591996&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1 Accept-Encoding: gzip, deflate Content-Length: 4624 Content-Type: application/json; charset=UTF-8 Host: browser.events.data.msn.cn Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:13 UTC	4624	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 53 65 72 76 65 72 4c 6f 67 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 63 34 39 38 37 31 31 66 30 32 36 35 34 65 64 63 61 38 61 37 31 35 63 61 36 65 31 63 62 34 64 34 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 35 2d 30 31 2d 31 30 54 31 35 3a 32 33 3a 30 30 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 7b 22 70 72 6f 64 75 63 74 22 3a 22 65 6e 74 77 69 6e 64 6f 77 73 64 61 73 68 22 2c 22 61 70 70 54 79 70 65 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 6e 61 6d 65 22 3a 22 77 69 6e 70 32 62 61 63 6b 69 6e 67 61 70 70 22 2c 22 69 73 4d 6f 63 6b 45 6e 76 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 56 65 72 22 3a 22 35 32 34 2e 33 30 35 30 32 2e 33 30 2e 30 22 2c 22 Data Ascii: {"name":"MS.News.Web.ServerLog","iKey":"o:c498711f02654edca8a715ca6e1cb4d4","time":"2025-01-10T15:23:00Z","ver":"4.0","data":{"page":{"product":"entwindowsdash","appType":"winWidgets","name":"winp2backingapp","isMockEnv":false,"hostVer":"524.30502.30.0","
2025-01-10 15:23:13 UTC	872	IN	HTTP/1.1 204 No Content Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: MC1=GUID=207b457df03b4c0fb37ee1fc2d4c4384&HASH=207b&LV=202501&V=4&LU=1736522593429; Domain=.microsoft.com; Expires=Sat, 10 Jan 2026 15:23:13 GMT; Path=/;Secure; SameSite=None Set-Cookie: MS0=b9aada9c4fda41b181a4041b99835b18; Domain=.microsoft.com; Expires=Fri, 10 Jan 2025 15:53:13 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1433 Access-Control-Allow-Headers: P3P,Set-Cookie,time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: time-delta-millis Date: Fri, 10 Jan 2025 15:23:12 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.24	59049	167.99.235.203	443	6844	C:\Users\user\Desktop\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:14 UTC	270	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=show_page&p=installing&_fcid=1736265551741605 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:14 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.24	59050	167.99.235.203	443	6844	C:\Users\user\Desktop\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:15 UTC	264	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=start&permision=&_fcid=1736265551741605 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:15 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.24	59051	167.99.235.203	443	6844	C:\Users\user\Desktop\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:16 UTC	262	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=download_start&_fcid=1736265551741605 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:16 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:16 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.24	59054	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:17 UTC	795	OUT	GET /installing.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&winver=22631&version=fa.2002&nocache=20250110102314.55&_fcid=1736265551741605 HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:17 UTC	644	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Fri, 10 Jan 2025 15:23:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Pragma: no-cache Location: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.24	59056	37.19.194.80	443	6844	C:\Users\user\Desktop\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:17 UTC	185	OUT	GET /download.php?&src=mini_installer&file=1&mini_ver=fa.2002 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: delivery.pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:17 UTC	802	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:23:17 GMT Content-Type: application/octet-stream Content-Length: 1334568 Connection: close Content-Description: File Transfer Content-Disposition: attachment; filename="Setup.exe" Expires: Fri, 10 Jan 2025 15:34:48 GMT Cache-Control: max-age=900 X-Frame-Options: SAMEORIGIN Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Strict-Transport-Security: max-age=31536000; includeSubDomains X-77-NZT: EggBJRPCTwFBDAGKxyXEAbfRAAAA X-77-NZT-Ray: 0d1fa51816072a61653b8167cc7bcb29 X-77-Cache: HIT X-77-Age: 209 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-10 15:23:17 UTC	15582	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ad 31 08 81 e9 50 66 d2 e9 50 66 d2 e9 50 66 d2 2a 5f 39 d2 eb 50 66 d2 e9 50 67 d2 4c 50 66 d2 2a 5f 3b d2 e6 50 66 d2 bd 73 56 d2 e3 50 66 d2 2e 56 60 d2 e8 50 66 d2 52 69 63 68 e9 50 66 d2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 1f 9b 4f 61 00 00 00 00 00 00 00 00 e0 00 0f 01 0b 01 06 00 00 68 00 00 00 2a 02 00 00 08 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1PfPfPf_9PfPgLPf_;PfsVPf.V`PfRichPfPELOah*
2025-01-10 15:23:17 UTC	16384	IN	Data Raw: 00 a1 20 27 42 00 8d 78 14 f6 07 20 0f 84 08 01 00 00 53 53 68 f0 00 00 00 68 0a 04 00 00 ff 75 08 ff 15 64 82 40 00 50 ff d6 8b 0f 83 e0 01 83 e1 fe 50 0b c8 89 0f e8 cc fc ff ff e8 ef 00 00 00 83 7d 0c 4e 0f 85 c0 00 00 00 68 e8 03 00 00 ff 75 08 ff 15 64 82 40 00 8b 7d 14 81 7f 08 0b 07 00 00 75 67 81 7f 0c 01 02 00 00 75 5e 8b 4f 1c 8b 57 18 89 4d f8 2b ca 81 f9 00 08 00 00 89 55 f4 c7 45 fc 00 82 42 00 73 41 8d 4d f4 51 53 68 4b 04 00 00 50 ff d6 8b 3d ec 81 40 00 68 02 7f 00 00 53 ff d7 50 ff 15 f0 81 40 00 6a 01 ff 75 fc ff 75 08 e8 9a 00 00 00 68 00 7f 00 00 53 ff d7 50 ff 15 f0 81 40 00 8b 7d 14 81 7f 08 00 07 00 00 75 48 81 7f 0c 00 01 00 00 75 3f 83 7f 10 0d 75 10 53 6a 01 68 11 01 00 00 ff 35 68 a2 42 00 ff d6 83 7f 10 1b 75 0c 53 53 6a 10 ff Data Ascii: 'Bx SShhud@PP}Nhud@}ugu^OWM+UEBsAMQShKP=@hSP@juuhSP@}uHu?uSjh5hBuSSj
2025-01-10 15:23:17 UTC	16384	IN	Data Raw: 4d 6f 76 65 46 69 6c 65 57 00 0b 03 53 65 74 43 75 72 72 65 6e 74 44 69 72 65 63 74 6f 72 79 57 00 00 61 01 47 65 74 46 69 6c 65 41 74 74 72 69 62 75 74 65 73 57 00 00 1a 03 53 65 74 46 69 6c 65 41 74 74 72 69 62 75 74 65 73 57 00 00 56 03 53 6c 65 65 70 00 df 01 47 65 74 54 69 63 6b 43 6f 75 6e 74 00 00 56 00 43 72 65 61 74 65 46 69 6c 65 57 00 63 01 47 65 74 46 69 6c 65 53 69 7a 65 00 7e 01 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 57 00 00 42 01 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 00 b9 00 45 78 69 74 50 72 6f 63 65 73 73 00 46 00 43 6f 70 79 46 69 6c 65 57 00 14 03 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62 6c 65 57 00 f4 01 47 65 74 57 69 6e 64 6f 77 73 44 69 72 65 63 74 6f 72 79 57 00 00 d6 01 47 65 74 54 65 Data Ascii: MoveFileWSetCurrentDirectoryWaGetFileAttributesWSetFileAttributesWVSleepGetTickCountVCreateFileWcGetFileSize~GetModuleFileNameWBGetCurrentProcessExitProcessFCopyFileWSetEnvironmentVariableWGetWindowsDirectoryWGetTe
2025-01-10 15:23:17 UTC	16384	IN	Data Raw: e3 ff ef ea e3 ff ef ea e3 fe ef eb e4 ff e9 c8 a7 ff e0 86 2c ff e4 7d 19 ff e6 7f 1a ff e6 7f 1a ff e6 7f 1a ff e6 7f 1a ff e6 7f 19 ff e6 80 1c ff ea ae 73 ff ee e5 d9 ff ee ea e4 ff ee e9 e3 ff ee ea e3 ff ef ea e3 ff ee e9 e3 ff ef ea e3 ff ee ea e3 fe ef ea e4 fe ee e9 e3 ff ee ea e4 ff ee e9 e3 ff ee e9 e3 ff ee ea e3 ff ee ea e3 ff ee ea e3 ff ee e9 e3 ff ee ea e3 ff ee ea e3 ff ee e9 e3 ff ef ea e4 fe ee e7 df ff ea b0 75 ff e6 7f 1b ff e6 7f 19 ff e6 7f 1a ff e6 7f 1a ff e6 7f 1a ff e6 7f 1a ff e3 7d 18 ff e0 84 2a ff e9 c5 a1 ff ef eb e5 ff ef ea e3 fe ee ea e3 ff ee ea e3 ff ef ea e4 fe ee e9 e3 ff ee e9 e3 ff ee e9 e3 ff ef ea e3 ff ee ea e3 ff ef ea e3 99 ef ea e4 74 ef ea e4 fe ef ea e3 ff ee ea e3 ff ef ea e3 ff ef ea e4 fe ef ea e3 ff ef Data Ascii: ,}su}*t
2025-01-10 15:23:18 UTC	16384	IN	Data Raw: e3 ff ed e2 d6 ff e8 97 48 ff e6 7e 17 ff e6 7f 1a ff e6 7f 1a ff e3 7c 16 ff e2 a1 60 ff ee e9 e2 ff ee e9 e2 ff ee e9 e2 ff ed e9 e2 ff ee e9 e2 f4 ee e9 e2 e6 ee e9 e3 ff ee e9 e3 ff ee e9 e3 ff ee ea e4 ff e6 b4 82 ff e3 7d 18 ff e6 7f 1a ff e6 7f 1a ff e6 7d 16 ff e9 a6 63 ff ee e8 e0 ff ee e9 e3 ff ee e9 e3 ff ee e9 e2 ff ee e9 e3 ff ee e9 e3 ff ee e9 e3 ff ee e9 e2 ff ee e9 e3 ff ee e8 e0 ff e9 a7 65 ff e6 7d 16 ff e6 7f 1a ff e6 7f 1a ff e2 7c 17 ff e5 b3 80 ff ee ea e4 ff ee e9 e3 ff ee e9 e3 ff ee e9 e3 ff ee e9 e3 e6 ef ea e4 c9 ee ea e3 ff ef ea e3 ff ef ea e3 ff ef eb e5 ff ec db c9 ff e5 9a 50 ff e6 81 1e ff e6 80 1b ff e8 93 40 ff ed d3 b8 ff ef eb e5 ff ee ea e3 ff ee ea e3 ff ef ea e3 ff ef ea e3 ff ee ea e3 ff ee ea e3 ff ee ea e3 ff ee Data Ascii: H~\|`}}ce}\|P@
2025-01-10 15:23:18 UTC	16384	IN	Data Raw: 9e 31 6a da c3 5e 90 ca fc f1 cd 59 3b 1f c3 1d c7 e0 26 8b ba 36 d4 65 35 80 cb c3 2a 64 20 23 73 24 2d 80 a1 ce 1a d6 16 17 7f 16 49 8e 54 5c 79 02 64 f8 75 f3 7a 7a 32 ec d6 5f 45 d4 a1 6d 19 3c d2 bb 2d 86 d6 7a 69 bb d1 f1 3e 34 59 92 be 36 88 8e 99 c8 67 98 67 b7 88 cb 2c 07 2c d4 54 20 81 83 ed 0d c4 f3 ad ca 0c 8e 3a 1b 67 be 71 3d 24 8a 56 c9 a5 8d da 7d 0c c7 1b 8f 8f fc 35 0d 37 a2 5a 62 1c 26 88 43 0d d6 bb d2 e4 33 d8 57 bb f5 6a 01 c7 d1 93 a2 f4 48 6c 77 f7 33 e6 0e 56 9d 0a d2 86 11 81 7d 16 27 3f 6e 50 76 6e f2 74 0d 27 59 a8 0b 5c a1 de 33 63 cc 12 3c 3c ec ac 8e fa a3 53 a2 6b 65 5c da 72 12 d5 d6 82 5d 02 24 37 1a 8b ea 9b df 89 48 fa 8a 10 56 36 4d 20 0a ed 86 41 8c c5 07 5c ed a2 84 49 61 32 4a 1d 25 d1 eb cc b3 e4 0d 8f e1 d2 a1 8f Data Ascii: 1j^Y;&6e5*d #s$-IT\yduzz2_Em<-zi>4Y6gg,,T :gq=$V}57Zb&C3WjHlw3V}'?nPvnt'Y\3c<<Ske\r]$7HV6M A\Ia2J%
2025-01-10 15:23:18 UTC	16384	IN	Data Raw: e9 0e d4 48 f5 25 5d 0d 57 4b 8a ba f7 39 e4 6f 04 7b 16 81 15 d8 4b 09 a2 83 6f 40 50 55 e9 4d f1 56 e7 b6 68 39 21 ed 17 ba 38 ff 6f 4e 12 4b ee 12 cb 03 d8 6a b3 c2 e4 2c be 55 8c 37 64 83 1f 00 3b fd 2b 42 e2 fa 18 a0 d1 7b be 2b 69 e5 0e c6 cd 13 44 05 78 2b 30 73 47 88 ac 18 33 fe 33 a3 41 97 a4 44 22 15 57 04 4a b6 34 42 20 a3 42 cc e8 00 1e 29 e5 b0 ae bc 87 5c da 97 6e 3c 0b aa 11 e1 a7 7d 33 33 7e 43 91 81 bc f8 b0 6b 71 a5 a1 d5 ba fa 41 53 0c 0a 3a 65 d6 33 3a c6 c6 18 50 44 be d6 b9 ad c1 0c 33 6e ab d7 23 53 07 51 ea 45 57 df 21 01 62 3d d4 d0 5d f1 53 bb d2 20 98 f7 2b c4 07 6b 91 98 18 f4 92 a4 ed 4b 5c 35 eb 25 c4 de 1b 0b 46 e8 75 3f b7 b7 7b 1c 30 50 a6 5c 9e 56 6f 16 65 80 ab c8 ef d9 17 cd 0a 83 40 78 4c 17 cd d4 f6 dd d4 eb b6 39 61 Data Ascii: H%]WK9o{Ko@PUMVh9!8oNKj,U7d;+B{+iDx+0sG33AD"WJ4B B)\n<}33~CkqAS:e3:PD3n#SQEW!b=]S +kK\5%Fu?{0P\Voe@xL9a
2025-01-10 15:23:18 UTC	16384	IN	Data Raw: 01 a5 98 f4 14 06 4f d8 f7 b9 f9 e7 15 d4 e8 2f ae 82 6e e2 9b d2 59 1d 67 7b d7 04 45 66 0c dc fe 6e 8f 86 da 29 c3 b1 b0 a9 e6 d5 5b f1 8c 96 e7 6f 00 44 fc d7 c4 cb 8b ed 99 ee 64 20 21 99 b6 28 35 97 c3 41 71 16 e4 e4 ba 59 cc 08 11 12 f1 42 57 ed 3a 1a 28 1c 42 94 00 75 d9 20 d5 5d c2 04 47 1a 8d 83 15 02 14 71 2f 6e 4e c4 96 f1 1e 81 76 7e f0 25 d3 36 06 bb 2d 51 92 12 6d a0 a7 d4 ad ca 1e aa 56 cc 4d 1f 85 30 b9 ad 4c f5 0c 8b c3 97 dc ea dc 25 38 50 70 75 4e ef 84 af 97 b7 81 e8 46 3f f4 0a 52 a9 de 66 d5 36 d8 9d 18 88 c4 ab 75 20 af 57 fe d1 fa d6 72 0c 7c 47 0e 0c 0d 94 37 6d 51 cb b0 da c4 57 3d 66 8f eb 8a 45 ac 5e ac 3c ac 2c bc bd 07 22 7e 11 b5 33 30 fa 50 0d 8e 20 70 c3 a5 b1 21 3e e4 69 87 68 f7 f2 15 98 7b c6 14 f0 03 45 43 b5 34 35 b3 Data Ascii: O/nYg{Efn)[oDd !(5AqYBW:(Bu ]Gq/nNv~%6-QmVM0L%8PpuNF?Rf6u Wr\|G7mQW=fE^<,"~30P p!>ih{EC45
2025-01-10 15:23:18 UTC	16384	IN	Data Raw: f0 db 1e 27 cf 58 9b 17 d5 58 b9 85 ca 54 8f e0 0f 47 4b 77 54 13 ce 54 0d 48 94 47 be 91 b1 30 87 99 d9 cc 73 2b 64 93 b8 a8 eb 40 a3 ed be 55 0a f7 fe 48 e3 39 b3 54 c5 03 95 1d d5 1d 26 00 b3 47 55 50 5e ac 2e 27 2b 8a ed 80 05 d5 b3 1c 14 cf 4a e1 1e b5 8e a6 8e 01 03 7c db 87 0a a7 a3 c9 af 2d b6 d2 35 4a 0c 04 27 4d 5e a4 4e a7 ef 78 6d ae f1 54 b9 91 80 3a 92 f6 57 59 33 24 5e 46 ab 07 66 ad a4 c1 ed 35 7b 5a a2 04 96 26 91 29 b5 9e 3e 80 c5 5f c9 f1 aa 5d 08 27 a6 06 25 88 29 d7 fd 8d b1 8c 7a 44 b1 4e 33 8d ad 0e ae 66 5b 16 eb e4 1a ae fd f5 f7 c3 18 45 61 39 48 f4 93 c1 da 38 a4 e3 9c 58 74 b5 ff 01 02 6d f1 2b 63 25 d7 f5 01 b7 d3 29 cd 29 8e 29 0f 52 5a e2 48 32 0b 8c 77 8b 91 11 6f 0b 8c 15 4c a5 a1 ad 43 d0 8b 98 41 3a 1c 61 68 ec d4 90 51 Data Ascii: 'XXTGKwTTHG0s+d@UH9T&GUP^.'+J\|-5J'M^NxmT:WY3$^Ff5{Z&)>_]'%)zDN3f[Ea9H8Xtm+c%)))RZH2woLCA:ahQ
2025-01-10 15:23:18 UTC	16384	IN	Data Raw: 96 43 21 a4 41 92 d7 9f 52 34 a8 a2 e9 e2 64 46 73 58 8f c1 d6 97 94 7e 6b 0f b8 81 35 bb bb 6c 50 3e a7 88 64 cd 9a 49 11 a6 3b df a5 45 6b 32 f7 3c c5 56 74 67 e4 d6 98 5e 50 2a 6e ed 0c 1b 69 00 3d f7 5b ec f2 0c 28 2b a5 c7 a2 4a 16 de 1c d5 b0 33 94 56 9d 60 d4 9c 44 c8 e7 52 43 d5 50 b0 89 ee 0e b8 f0 85 3e a3 db a1 59 e7 98 7e 71 f7 99 fa c1 2a 17 45 d1 8a b0 47 38 be 5c 94 02 9a fc de 47 3c 20 7d dd 83 62 28 a5 65 55 05 6a d6 42 80 c0 d8 8d d3 2c 94 53 1c 50 33 0f 3a 7b d7 d4 b0 e9 7f d9 3d 56 c7 3b 38 8e 8a 3a 2c c3 77 61 eb 44 75 8b 5a 6b 73 52 e0 a8 df 1f ac c2 95 03 cd 9e 06 a0 31 f2 84 be eb 0d f6 04 62 9c ba cd 93 57 22 fa 18 a1 84 67 cc 60 87 25 c6 44 a1 6a 2b 9e 0d 69 09 81 72 7b 9d ee fa cb 16 f7 cc b3 0f 87 d0 50 38 1b 52 82 b9 87 38 d2 Data Ascii: C!AR4dFsX~k5lP>dI;Ek2<Vtg^Pni=[(+J3V`DRCP>Y~qEG8\G< }b(eUjB,SP3:{=V;8:,waDuZksR1bW"g`%Dj+ir{P8R8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.24	59059	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:18 UTC	776	OUT	GET /?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 HTTP/1.1 Host: pcapp.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:18 UTC	585	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Set-Cookie: srcr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:18 UTC	15799	IN	Data Raw: 31 65 33 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 50 50 20 53 54 4f 52 45 3a 20 49 6e 73 74 61 6c 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6c 70 2f 61 70 70 73 74 6f 72 65 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a Data Ascii: 1e3b<!doctype html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>APP STORE: Installing</title> <link rel="icon" href="/lp/appstore/img/favicon.ico" />
2025-01-10 15:23:18 UTC	12903	IN	Data Raw: 20 20 20 20 20 20 20 76 61 72 20 72 65 61 64 43 6f 6f 6b 69 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 61 6d 65 45 51 20 3d 20 6e 61 6d 65 20 2b 20 22 3d 22 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 63 0d 0a 32 30 30 30 0d 0a 61 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 20 3d 20 63 61 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 63 2e 63 68 61 72 41 74 28 30 29 20 3d 3d 20 22 20 22 29 20 63 20 3d 20 63 2e 73 75 62 73 Data Ascii: var readCookie = function(name) { var nameEQ = name + "="; var ca = document.cookie.split(";"); for (var i = 0; i < c2000a.length; i++) { var c = ca[i]; while (c.charAt(0) == " ") c = c.subs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.24	59063	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:19 UTC	715	OUT	GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.css?nocache=1731594251558 HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:19 UTC	350	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:19 GMT Content-Type: text/css Content-Length: 66265 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:19 UTC	16034	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 68 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 Data Ascii: /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;heigh
2025-01-10 15:23:19 UTC	16384	IN	Data Raw: 64 65 72 3a 38 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 39 3b 6f 72 64 65 72 3a 38 7d 2e 6f 72 64 65 72 2d 6c 67 2d 39 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 39 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 31 30 3b 6f 72 64 65 72 3a 39 7d 2e 6f 72 64 65 72 2d 6c 67 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 31 31 3b 6f 72 64 65 72 3a 31 30 7d 2e 6f 72 64 65 72 2d 6c 67 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 31 32 3b 6f 72 64 65 72 3a 31 31 7d 2e 6f 72 64 65 72 2d 6c 67 Data Ascii: der:8;-webkit-box-ordinal-group:9;order:8}.order-lg-9{-ms-flex-order:9;-webkit-box-ordinal-group:10;order:9}.order-lg-10{-ms-flex-order:10;-webkit-box-ordinal-group:11;order:10}.order-lg-11{-ms-flex-order:11;-webkit-box-ordinal-group:12;order:11}.order-lg
2025-01-10 15:23:19 UTC	16384	IN	Data Raw: 69 66 79 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 61 72 6f 75 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 64 69 73 74 72 69 62 75 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 61 72 6f 75 6e 64 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 6d 64 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 69 Data Ascii: ify !important;justify-content:space-between !important}.justify-content-md-around{-ms-flex-pack:distribute !important;justify-content:space-around !important}.align-items-md-start{-ms-flex-align:start !important;-webkit-box-align:start !important;align-i
2025-01-10 15:23:19 UTC	16384	IN	Data Raw: 73 6d 2d 6e 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 73 6d 2d 6e 34 7b 6d 61 72 67 69 6e 3a 2d 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 73 6d 2d 6e 34 2c 2e 6d 79 2d 73 6d 2d 6e 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 73 6d 2d 6e 34 2c 2e 6d 78 2d 73 6d 2d 6e 34 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 73 6d 2d 6e 34 2c 2e 6d 79 2d 73 6d 2d 6e 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 73 6d 2d 6e 34 2c 2e 6d 78 2d 73 6d 2d 6e 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 Data Ascii: sm-n3{margin-left:-1rem !important}.m-sm-n4{margin:-1.5rem !important}.mt-sm-n4,.my-sm-n4{margin-top:-1.5rem !important}.mr-sm-n4,.mx-sm-n4{margin-right:-1.5rem !important}.mb-sm-n4,.my-sm-n4{margin-bottom:-1.5rem !important}.ml-sm-n4,.mx-sm-n4{margin-lef
2025-01-10 15:23:19 UTC	1079	IN	Data Raw: 72 61 70 70 65 72 2d 64 79 6e 61 6d 69 63 5f 5f 74 69 74 6c 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 34 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 73 20 6c 69 6e 65 61 72 20 2e 35 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 73 20 6c 69 6e 65 61 72 20 2e 35 73 7d 2e 77 72 61 70 70 65 72 2d 64 79 6e 61 6d 69 63 5f 5f 73 75 62 74 69 74 6c 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 Data Ascii: rapper-dynamic__title{white-space:nowrap;font-weight:600;font-size:48px;line-height:56px;margin-bottom:10px;opacity:0;-webkit-transition:all 1s linear .5s;transition:all 1s linear .5s}.wrapper-dynamic__subtitle{white-space:nowrap;font-size:16px;line-heigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.24	59064	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:19 UTC	752	OUT	GET /images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:19 UTC	327	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 10 Jan 2025 15:23:19 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://repository.pcapp.store/pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-10 15:23:19 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.24	59065	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:19 UTC	640	OUT	GET /src/main.js HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:19 UTC	362	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:19 GMT Content-Type: application/javascript Content-Length: 234 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:19 UTC	234	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 70 69 78 65 6c 45 76 65 6e 74 20 21 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 0a 20 20 76 61 72 20 73 31 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 0a 20 20 20 20 73 30 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 0a 20 20 73 31 2e 73 72 63 20 3d 20 22 2f 73 72 63 2f 6d 61 69 6e 5f 63 6f 64 65 2e 6a 73 3f 6e 6f 63 61 63 68 65 3d 31 36 35 33 32 38 31 32 33 31 36 39 32 35 34 33 22 3b 0a 20 20 73 30 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 73 31 2c 20 73 30 29 3b 0a 7d 0a Data Ascii: if (typeof pixelEvent != "function") { var s1 = document.createElement("script"), s0 = document.getElementsByTagName("script")[0]; s1.src = "/src/main_code.js?nocache=1653281231692543"; s0.parentNode.insertBefore(s1, s0);}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.24	59066	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:19 UTC	700	OUT	GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.js?nocache=1731594251558 HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:19 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:19 GMT Content-Type: application/javascript Content-Length: 104857 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:19 UTC	16019	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 41 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 28 65 29 20 7b 0a 20 20 76 61 72 20 72 2c 20 74 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 73 75 6d 65 28 72 2c 20 74 29 20 7b 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 65 5b 72 5d 28 74 29 2c 0a 20 20 20 20 20 20 20 20 6f 20 3d 20 6e 2e 76 61 6c 75 65 2c 0a 20 20 20 20 20 20 20 20 75 20 3d 20 6f 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 3b 0a 20 20 20 20 20 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 20 3f 20 6f 2e 76 20 3a 20 6f 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 22 72 Data Ascii: function _AsyncGenerator(e) { var r, t; function resume(r, t) { try { var n = e[r](t), o = n.value, u = o instanceof _OverloadYield; Promise.resolve(u ? o.v : o).then(function (t) { if (u) { var i = "r
2025-01-10 15:23:19 UTC	16384	IN	Data Raw: 76 61 72 20 63 3b 0a 20 20 20 20 73 77 69 74 63 68 20 28 61 29 20 7b 0a 20 20 20 20 20 20 63 61 73 65 20 31 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 61 63 63 65 73 73 6f 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 32 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 6d 65 74 68 6f 64 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 33 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 67 65 74 74 65 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 34 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 73 65 74 74 65 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 64 65 66 61 75 6c 74 3a 0a 20 20 20 20 20 20 20 20 63 20 Data Ascii: var c; switch (a) { case 1: c = "accessor"; break; case 2: c = "method"; break; case 3: c = "getter"; break; case 4: c = "setter"; break; default: c
2025-01-10 15:23:19 UTC	16384	IN	Data Raw: 6c 6c 20 3a 20 6c 29 2c 0a 20 20 20 20 70 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 72 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6f 2c 0a 20 20 20 20 20 20 20 20 61 2c 0a 20 20 20 20 20 20 20 20 69 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 5f 63 68 65 63 6b 49 6e 52 48 53 28 74 29 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 75 20 3d 20 6e 65 77 20 4d 61 70 28 29 3b 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 20 26 26 20 69 2e 70 75 73 68 28 63 2e 62 69 6e 64 28 6e 75 6c 6c 2c 20 65 29 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 Data Ascii: ll : l), p = function (e, t, r, n) { var o, a, i = [], s = function (t) { return _checkInRHS(t) === e; }, u = new Map(); function l(e) { e && i.push(c.bind(null, e)); }
2025-01-10 15:23:19 UTC	16384	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 20 74 2c 20 69 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 20 3a 20 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 2e 76 61 6c 75 65 20 3d 20 74 2c 20 69 28 75 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 20 74 2c 20 69 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 28 63 2e 61 72 67 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 72 3b 0a 20 20 20 20 6f 28 74 68 69 73 2c 20 22 5f 69 6e 76 6f Data Ascii: ) { invoke("throw", t, i, a); }) : e.resolve(h).then(function (t) { u.value = t, i(u); }, function (t) { return invoke("throw", t, i, a); }); } a(c.arg); } var r; o(this, "_invo
2025-01-10 15:23:19 UTC	16384	IN	Data Raw: 63 65 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 69 5d 20 21 3d 20 6e 75 6c 6c 20 3f 20 4f 62 6a 65 63 74 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 20 3a 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 6f 77 6e 4b 65 79 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 6f 75 72 63 65 29 3b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 6f 77 6e 4b 65 79 73 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 77 6e 4b 65 79 73 2c 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 73 6f 75 72 63 65 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 20 28 73 79 6d 29 20 7b 0a 20 20 20 20 Data Ascii: ce = arguments[i] != null ? Object(arguments[i]) : {}; var ownKeys = Object.keys(source); if (typeof Object.getOwnPropertySymbols === 'function') { ownKeys.push.apply(ownKeys, Object.getOwnPropertySymbols(source).filter(function (sym) {
2025-01-10 15:23:19 UTC	16384	IN	Data Raw: 76 65 72 2c 20 64 65 73 63 72 69 70 74 6f 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 68 65 63 6b 50 72 69 76 61 74 65 53 74 61 74 69 63 41 63 63 65 73 73 28 72 65 63 65 69 76 65 72 2c 20 63 6c 61 73 73 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 72 65 74 75 72 6e 56 61 6c 75 65 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 5f 61 73 73 65 72 74 43 6c 61 73 73 42 72 61 6e 64 28 63 6c 61 73 73 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 72 65 63 65 69 76 65 72 2c 20 72 65 74 75 72 6e 56 61 6c 75 65 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 68 65 63 6b 50 72 69 76 61 74 65 53 74 61 74 69 63 46 69 65 6c 64 44 65 73 63 72 69 70 74 6f 72 28 64 65 73 63 72 69 70 74 6f 72 2c 20 61 63 74 69 6f 6e 29 20 7b 0a 20 20 69 66 20 28 64 65 73 63 Data Ascii: ver, descriptor);}function _classCheckPrivateStaticAccess(receiver, classConstructor, returnValue) { return _assertClassBrand(classConstructor, receiver, returnValue);}function _classCheckPrivateStaticFieldDescriptor(descriptor, action) { if (desc
2025-01-10 15:23:19 UTC	6918	IN	Data Raw: 69 6d 61 74 65 20 73 68 6f 72 74 63 75 74 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 57 61 72 6d 69 6e 67 20 75 70 20 74 68 65 20 61 70 70 20 74 6f 61 73 74 65 72 22 2c 0a 20 20 73 75 62 74 69 74 6c 65 3a 20 22 62 65 63 61 75 73 65 20 66 72 65 73 68 20 61 70 70 73 20 61 72 65 20 74 68 65 20 62 65 73 74 20 61 70 70 73 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 50 75 74 74 69 6e 67 20 74 68 65 20 61 70 70 73 20 74 68 72 6f 75 67 68 20 62 6f 6f 74 20 63 61 6d 70 22 2c 0a 20 20 73 75 62 74 69 74 6c 65 3a 20 22 74 68 65 79 27 6c 6c 20 63 6f 6d 65 20 6f 75 74 20 73 74 72 6f 6e 67 65 72 20 61 6e 64 20 66 61 73 74 65 72 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 42 61 6c 61 6e 63 69 6e 67 20 74 68 65 20 61 70 70 20 75 6e 69 76 65 72 73 65 Data Ascii: imate shortcut"}, { title: "Warming up the app toaster", subtitle: "because fresh apps are the best apps"}, { title: "Putting the apps through boot camp", subtitle: "they'll come out stronger and faster"}, { title: "Balancing the app universe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.24	59062	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:19 UTC	724	OUT	GET /images/front_img/logo/logo-dark.svg HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:19 UTC	299	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 10 Jan 2025 15:23:19 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://repository.pcapp.store/pcapp/images/front_img/logo/logo-dark.svg Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-10 15:23:19 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.24	59069	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:19 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 31 36 0d 0a 4d 53 2d 43 56 3a 20 31 4b 41 37 53 46 4b 79 2b 30 43 64 77 58 57 62 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 66 63 32 66 37 34 62 31 34 37 64 64 33 63 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 316MS-CV: 1KA7SFKy+0CdwXWb.1Context: 5fc2f74b147dd3cc
2025-01-10 15:23:19 UTC	260	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 32 32 36 33 31 2e 34 31 36 39 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 30 30 31 38 30 30 31 32 41 38 34 34 37 39 41 41 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.22631.4169</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>00180012A84479AA</deviceName><followRetry>true</followRetry></agent></con
2025-01-10 15:23:19 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 31 4b 41 37 53 46 4b 79 2b 30 43 64 77 58 57 62 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 66 63 32 66 37 34 62 31 34 37 64 64 33 63 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 53 76 57 2b 6c 34 6b 31 4c 4c 61 6b 59 45 42 52 71 67 2f 77 49 77 2f 34 61 54 74 66 75 68 67 30 4a 48 55 35 37 48 54 6a 57 44 4c 76 4e 55 74 4b 5a 41 68 59 48 6c 39 65 6f 38 4a 42 67 48 2b 65 63 66 71 2f 2b 72 41 2f 33 73 50 67 2f 7a 65 46 66 46 78 6c 6c 38 58 61 78 2b 76 50 37 77 55 6f 34 66 79 6a 4b 6b 65 43 5a 43 71 63 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 1KA7SFKy+0CdwXWb.2Context: 5fc2f74b147dd3cc<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARSvW+l4k1LLakYEBRqg/wIw/4aTtfuhg0JHU57HTjWDLvNUtKZAhYHl9eo8JBgH+ecfq/+rA/3sPg/zeFfFxll8Xax+vP7wUo4fyjKkeCZCqc
2025-01-10 15:23:19 UTC	224	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 39 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 31 4b 41 37 53 46 4b 79 2b 30 43 64 77 58 57 62 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 66 63 32 66 37 34 62 31 34 37 64 64 33 63 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044479 197MS-CV: 1KA7SFKy+0CdwXWb.3Context: 5fc2f74b147dd3cc<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-10 15:23:19 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-10 15:23:19 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 69 33 71 66 45 61 35 44 56 6b 61 2f 62 42 69 53 72 6c 31 5a 7a 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: i3qfEa5DVka/bBiSrl1ZzA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.24	59072	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:20 UTC	352	OUT	GET /src/main.js HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:20 UTC	362	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:20 GMT Content-Type: application/javascript Content-Length: 234 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:20 UTC	234	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 70 69 78 65 6c 45 76 65 6e 74 20 21 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 0a 20 20 76 61 72 20 73 31 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 0a 20 20 20 20 73 30 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 0a 20 20 73 31 2e 73 72 63 20 3d 20 22 2f 73 72 63 2f 6d 61 69 6e 5f 63 6f 64 65 2e 6a 73 3f 6e 6f 63 61 63 68 65 3d 31 36 35 33 32 38 31 32 33 31 36 39 32 35 34 33 22 3b 0a 20 20 73 30 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 73 31 2c 20 73 30 29 3b 0a 7d 0a Data Ascii: if (typeof pixelEvent != "function") { var s1 = document.createElement("script"), s0 = document.getElementsByTagName("script")[0]; s1.src = "/src/main_code.js?nocache=1653281231692543"; s0.parentNode.insertBefore(s1, s0);}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.24	59071	169.150.255.183	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:20 UTC	652	OUT	GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:20 UTC	642	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:23:20 GMT Content-Type: image/svg+xml Content-Length: 3628 Connection: close x-amz-id-2: WRgK1Io4+MvU/ydU83MrxmIn/9sZ3NO1HJcFvHefwq/1ZdYE78Mq+rqIxLdJVd31VFlMXGDobnI= x-amz-request-id: 72MB1RC30TM522RG Last-Modified: Fri, 15 Nov 2024 12:53:30 GMT ETag: "ee8b3c30df90d2d7459dd6d7f7067c14" x-amz-server-side-encryption: AES256 x-amz-version-id: sg0bjO.xEEZX7iRlW1PhUp5Qu9shLY6K X-77-NZT: EggBqZb/tgFBDAHUZjgRAberjw4A X-77-NZT-Ray: 15b3c71187b223c2683b8167ce5e4b16 X-77-Cache: HIT X-77-Age: 954283 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-10 15:23:20 UTC	3628	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 32 22 20 68 65 69 67 68 74 3d 22 31 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 32 20 31 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 20 31 32 39 36 22 3e 3c 67 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 20 33 30 32 22 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 64 5f 35 33 39 5f 32 37 39 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 31 32 2e 35 43 31 36 20 31 30 2e 30 31 34 37 20 31 38 2e 30 31 34 37 20 38 20 32 30 2e 35 20 38 48 31 31 31 2e 35 43 31 31 33 2e 39 38 35 20 38 20 31 31 36 20 31 30 2e 30 31 34 37 20 31 31 36 20 31 32 2e 35 Data Ascii: <svg width="132" height="132" viewBox="0 0 132 132" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Group 1296"><g id="Rectangle 302" filter="url(#filter0_d_539_279)"><path d="M16 12.5C16 10.0147 18.0147 8 20.5 8H111.5C113.985 8 116 10.0147 116 12.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.24	59070	169.150.255.183	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:20 UTC	624	OUT	GET /pcapp/images/front_img/logo/logo-dark.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:20 UTC	642	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:23:20 GMT Content-Type: image/svg+xml Content-Length: 3030 Connection: close x-amz-id-2: zpUwCq8YmUo8gLHVyVMkKAjvTPUfh43oUhTR1Q4EcGsu9GIN+pk2euvF2hiqdog1S/Ze4Fxg3NA= x-amz-request-id: B912Q5SFRV3STMG3 Last-Modified: Mon, 04 Nov 2024 16:03:18 GMT ETag: "23df6f3e1d5a1db5a782f3f71fac80ce" x-amz-server-side-encryption: AES256 x-amz-version-id: bkVwmlo6N4ysv9Cbs.Mwmy3K3.pEhNbN X-77-NZT: EggBqZb/tgFBDAGckiEfAbeEUQgA X-77-NZT-Ray: 15b3c711c67393c2683b8167cf864817 X-77-Cache: HIT X-77-Age: 545156 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-10 15:23:20 UTC	3030	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 30 20 39 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 39 30 22 20 72 78 3d 22 32 30 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 32 32 35 37 5f 39 32 29 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 36 39 38 20 32 30 2e 37 31 37 38 43 33 30 2e 34 36 39 38 20 31 36 2e 34 35 35 34 20 32 37 2e 30 31 34 34 20 31 33 2e 30 30 30 31 20 32 32 2e 37 35 32 31 20 31 33 2e 30 30 30 31 43 31 38 2e 34 38 39 37 20 31 33 2e Data Ascii: <svg width="90" height="90" viewBox="0 0 90 90" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="90" height="90" rx="20" fill="url(#paint0_linear_2257_92)"/><path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.24	59076	167.99.235.203	443	6844	C:\Users\user\Desktop\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:20 UTC	305	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=download_done&result=12345678-1234-5678-90AB-CDDEEFAABBCC&_fcid=1736265551741605 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:20 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:20 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.24	59073	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:20 UTC	412	OUT	GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.js?nocache=1731594251558 HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:20 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:20 GMT Content-Type: application/javascript Content-Length: 104857 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:20 UTC	16019	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 41 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 28 65 29 20 7b 0a 20 20 76 61 72 20 72 2c 20 74 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 73 75 6d 65 28 72 2c 20 74 29 20 7b 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 65 5b 72 5d 28 74 29 2c 0a 20 20 20 20 20 20 20 20 6f 20 3d 20 6e 2e 76 61 6c 75 65 2c 0a 20 20 20 20 20 20 20 20 75 20 3d 20 6f 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 3b 0a 20 20 20 20 20 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 20 3f 20 6f 2e 76 20 3a 20 6f 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 22 72 Data Ascii: function _AsyncGenerator(e) { var r, t; function resume(r, t) { try { var n = e[r](t), o = n.value, u = o instanceof _OverloadYield; Promise.resolve(u ? o.v : o).then(function (t) { if (u) { var i = "r
2025-01-10 15:23:20 UTC	16384	IN	Data Raw: 76 61 72 20 63 3b 0a 20 20 20 20 73 77 69 74 63 68 20 28 61 29 20 7b 0a 20 20 20 20 20 20 63 61 73 65 20 31 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 61 63 63 65 73 73 6f 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 32 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 6d 65 74 68 6f 64 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 33 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 67 65 74 74 65 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 34 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 73 65 74 74 65 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 64 65 66 61 75 6c 74 3a 0a 20 20 20 20 20 20 20 20 63 20 Data Ascii: var c; switch (a) { case 1: c = "accessor"; break; case 2: c = "method"; break; case 3: c = "getter"; break; case 4: c = "setter"; break; default: c
2025-01-10 15:23:20 UTC	16384	IN	Data Raw: 6c 6c 20 3a 20 6c 29 2c 0a 20 20 20 20 70 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 72 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6f 2c 0a 20 20 20 20 20 20 20 20 61 2c 0a 20 20 20 20 20 20 20 20 69 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 5f 63 68 65 63 6b 49 6e 52 48 53 28 74 29 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 75 20 3d 20 6e 65 77 20 4d 61 70 28 29 3b 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 20 26 26 20 69 2e 70 75 73 68 28 63 2e 62 69 6e 64 28 6e 75 6c 6c 2c 20 65 29 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 Data Ascii: ll : l), p = function (e, t, r, n) { var o, a, i = [], s = function (t) { return _checkInRHS(t) === e; }, u = new Map(); function l(e) { e && i.push(c.bind(null, e)); }
2025-01-10 15:23:20 UTC	16384	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 20 74 2c 20 69 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 20 3a 20 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 2e 76 61 6c 75 65 20 3d 20 74 2c 20 69 28 75 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 20 74 2c 20 69 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 28 63 2e 61 72 67 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 72 3b 0a 20 20 20 20 6f 28 74 68 69 73 2c 20 22 5f 69 6e 76 6f Data Ascii: ) { invoke("throw", t, i, a); }) : e.resolve(h).then(function (t) { u.value = t, i(u); }, function (t) { return invoke("throw", t, i, a); }); } a(c.arg); } var r; o(this, "_invo
2025-01-10 15:23:20 UTC	16384	IN	Data Raw: 63 65 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 69 5d 20 21 3d 20 6e 75 6c 6c 20 3f 20 4f 62 6a 65 63 74 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 20 3a 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 6f 77 6e 4b 65 79 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 6f 75 72 63 65 29 3b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 6f 77 6e 4b 65 79 73 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 77 6e 4b 65 79 73 2c 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 73 6f 75 72 63 65 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 20 28 73 79 6d 29 20 7b 0a 20 20 20 20 Data Ascii: ce = arguments[i] != null ? Object(arguments[i]) : {}; var ownKeys = Object.keys(source); if (typeof Object.getOwnPropertySymbols === 'function') { ownKeys.push.apply(ownKeys, Object.getOwnPropertySymbols(source).filter(function (sym) {
2025-01-10 15:23:20 UTC	16384	IN	Data Raw: 76 65 72 2c 20 64 65 73 63 72 69 70 74 6f 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 68 65 63 6b 50 72 69 76 61 74 65 53 74 61 74 69 63 41 63 63 65 73 73 28 72 65 63 65 69 76 65 72 2c 20 63 6c 61 73 73 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 72 65 74 75 72 6e 56 61 6c 75 65 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 5f 61 73 73 65 72 74 43 6c 61 73 73 42 72 61 6e 64 28 63 6c 61 73 73 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 72 65 63 65 69 76 65 72 2c 20 72 65 74 75 72 6e 56 61 6c 75 65 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 68 65 63 6b 50 72 69 76 61 74 65 53 74 61 74 69 63 46 69 65 6c 64 44 65 73 63 72 69 70 74 6f 72 28 64 65 73 63 72 69 70 74 6f 72 2c 20 61 63 74 69 6f 6e 29 20 7b 0a 20 20 69 66 20 28 64 65 73 63 Data Ascii: ver, descriptor);}function _classCheckPrivateStaticAccess(receiver, classConstructor, returnValue) { return _assertClassBrand(classConstructor, receiver, returnValue);}function _classCheckPrivateStaticFieldDescriptor(descriptor, action) { if (desc
2025-01-10 15:23:20 UTC	6918	IN	Data Raw: 69 6d 61 74 65 20 73 68 6f 72 74 63 75 74 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 57 61 72 6d 69 6e 67 20 75 70 20 74 68 65 20 61 70 70 20 74 6f 61 73 74 65 72 22 2c 0a 20 20 73 75 62 74 69 74 6c 65 3a 20 22 62 65 63 61 75 73 65 20 66 72 65 73 68 20 61 70 70 73 20 61 72 65 20 74 68 65 20 62 65 73 74 20 61 70 70 73 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 50 75 74 74 69 6e 67 20 74 68 65 20 61 70 70 73 20 74 68 72 6f 75 67 68 20 62 6f 6f 74 20 63 61 6d 70 22 2c 0a 20 20 73 75 62 74 69 74 6c 65 3a 20 22 74 68 65 79 27 6c 6c 20 63 6f 6d 65 20 6f 75 74 20 73 74 72 6f 6e 67 65 72 20 61 6e 64 20 66 61 73 74 65 72 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 42 61 6c 61 6e 63 69 6e 67 20 74 68 65 20 61 70 70 20 75 6e 69 76 65 72 73 65 Data Ascii: imate shortcut"}, { title: "Warming up the app toaster", subtitle: "because fresh apps are the best apps"}, { title: "Putting the apps through boot camp", subtitle: "they'll come out stronger and faster"}, { title: "Balancing the app universe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.24	59074	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:20 UTC	807	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 74 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680
2025-01-10 15:23:20 UTC	74	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 22 2c 22 61 22 3a 22 74 72 69 67 67 65 72 22 2c 22 70 22 3a 7b 22 74 22 3a 22 66 69 6e 69 73 68 49 6e 73 74 61 6c 6c 46 61 22 2c 22 77 73 22 3a 74 72 75 65 2c 22 61 64 64 22 3a 7b 7d 7d 7d Data Ascii: {"c":"front","a":"trigger","p":{"t":"finishInstallFa","ws":true,"add":{}}}
2025-01-10 15:23:20 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:20 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:20 UTC	215	IN	Data Raw: 63 63 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 5c 6e 20 20 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 63 6f 6e 76 65 72 73 69 6f 6e 27 2c 20 7b 5c 6e 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 38 35 38 31 32 38 32 31 30 5c 2f 6b 54 61 46 43 49 75 71 30 59 59 5a 45 4e 4c 2d 6c 35 6b 44 27 2c 5c 6e 20 20 20 20 20 20 27 76 61 6c 75 65 27 3a 20 31 2e 30 2c 5c 6e 20 20 20 20 20 20 27 63 75 72 72 65 6e 63 79 27 3a 20 27 55 53 44 27 2c 5c 6e 20 20 20 20 20 20 27 61 77 5f 72 65 6d 61 72 6b 65 74 69 6e 67 5f 6f 6e 6c 79 27 3a 20 74 72 75 65 5c 6e 20 20 7d 29 3b 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: cc{"state":"ok","result":"\n gtag('event', 'conversion', {\n 'send_to': 'AW-858128210\/kTaFCIuq0YYZENL-l5kD',\n 'value': 1.0,\n 'currency': 'USD',\n 'aw_remarketing_only': true\n });"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.24	59075	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:20 UTC	809	OUT	POST /pixelgif.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 351 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680
2025-01-10 15:23:20 UTC	351	OUT	Data Raw: 7b 22 65 76 74 5f 73 72 63 22 3a 22 77 65 62 22 2c 22 65 76 74 5f 61 63 74 69 6f 6e 22 3a 22 76 69 73 74 79 70 65 22 2c 22 67 70 75 22 3a 22 47 6f 6f 67 6c 65 2c 20 56 75 6c 6b 61 6e 20 31 2e 33 2e 30 20 28 53 77 69 66 74 53 68 61 64 65 72 20 44 65 76 69 63 65 20 28 53 75 62 7a 65 72 6f 29 20 28 30 78 30 30 30 30 43 30 44 45 29 29 2c 20 53 77 69 66 74 53 68 61 64 65 72 20 64 72 69 76 65 72 29 22 2c 22 68 65 69 67 68 74 22 3a 31 32 38 30 2c 22 77 69 64 74 68 22 3a 31 30 32 34 2c 22 62 72 6f 77 73 65 72 22 3a 22 43 48 22 2c 22 62 72 6f 77 73 65 72 76 65 72 22 3a 31 33 31 2c 22 6f 73 22 3a 22 31 31 22 2c 22 63 6f 6f 6b 69 65 73 22 3a 31 2c 22 6d 65 6d 6f 72 79 22 3a 38 2c 22 7a 6f 6f 6d 22 3a 31 30 30 2c 22 76 69 64 65 6f 5f 69 6e 70 75 74 22 3a 30 2c 22 61 Data Ascii: {"evt_src":"web","evt_action":"vistype","gpu":"Google, Vulkan 1.3.0 (SwiftShader Device (Subzero) (0x0000C0DE)), SwiftShader driver)","height":1280,"width":1024,"browser":"CH","browserver":131,"os":"11","cookies":1,"memory":8,"zoom":100,"video_input":0,"a
2025-01-10 15:23:20 UTC	498	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:20 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:20 UTC	106	IN	Data Raw: 35 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 5fPNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.24	59077	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:20 UTC	807	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680
2025-01-10 15:23:20 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 42 38 35 45 34 44 35 36 2d 46 45 37 46 2d 30 35 42 32 2d 30 35 30 35 2d 32 36 41 37 45 44 42 34 33 36 38 30 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"B85E4D56-FE7F-05B2-0505-26A7EDB43680"}}
2025-01-10 15:23:20 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:20 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:20 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 6e 6f 20 69 6e 66 6f 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"no info"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.24	59078	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:20 UTC	783	OUT	GET /images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/lp/lpd_installing_r2/src/lpd_installing_r2.min.css?nocache=1731594251558 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680
2025-01-10 15:23:20 UTC	326	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 10 Jan 2025 15:23:20 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://repository.pcapp.store/pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-10 15:23:20 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.24	59080	142.250.184.226	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	1326	OUT	GET /pagead/viewthroughconversion/858128210/?random=1736522599729&cv=11&fst=1736522599729&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:21 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-Jan-2025 15:38:21 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 15:23:21 UTC	548	IN	Data Raw: 31 32 36 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 126a(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 64 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 71 3f 67 3d 71 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d Data Ascii: ;function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 3b 4a 3c 48 2e 6c 65 6e 67 74 68 3b 4a 2b 2b 29 69 66 28 49 3d 49 5b 48 5b 4a 5d 5d 2c 49 3d 3d 6e 75 6c 6c 29 7b 47 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 47 3d 49 7d 76 61 72 20 4b 3d 47 26 26 47 5b 36 31 30 34 30 31 33 30 31 5d 3b 46 3d 4b 21 3d 6e 75 6c 6c 3f 4b 3a 21 31 3b 76 61 72 20 4c 2c 4d 3d 78 2e 6e 61 76 69 67 61 74 6f 72 3b 4c 3d 4d 3f 4d 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 61 29 7b 72 65 74 75 72 6e 20 46 3f 4c Data Ascii: ror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0;J<H.length;J++)if(I=I[H[J]],I==null){G=null;break a}G=I}var K=G&&G[610401301];F=K!=null?K:!1;var L,M=x.navigator;L=M?M.userAgentData\|\|null:null;function N(a){return F?L
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 56 3d 5b 22 73 73 5f 22 5d 2c 57 3d 73 7c 7c 78 3b 20 56 5b 30 5d 69 6e 20 57 7c 7c 74 79 70 65 6f 66 20 57 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 57 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 56 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 58 3b 56 2e 6c 65 6e 67 74 68 26 26 28 58 3d 56 2e 73 68 69 66 74 28 29 29 3b 29 56 2e 6c 65 6e 67 74 68 7c 7c 55 3d 3d 3d 76 6f 69 64 20 30 3f 57 5b 58 5d 26 26 57 5b 58 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 Data Ascii: rror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}var V=["ss_"],W=s\|\|x; V[0]in W\|\|typeof W.execScript=="undefined"\|\|W.execScript("var "+V[0]);for(var X;V.length&&(X=V.shift());)V.length\|\|U===void 0?W[X]&&W[X]!==Object.pr
2025-01-10 15:23:21 UTC	4	IN	Data Raw: 29 3b 0d 0a Data Ascii: );
2025-01-10 15:23:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.24	59079	142.250.185.228	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	975	OUT	POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fpcapp.store%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=892223873.1736522600&dt=APP%20STORE%3A%20Installing&auid=1224110086.1736522600&navt=n&npa=0&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&tft=1736522599739&tfd=4070&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:21 UTC	575	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: text/plain Date: Fri, 10 Jan 2025 15:23:21 GMT Vary: Origin Vary: X-Origin Vary: Referer Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://pcapp.store Access-Control-Expose-Headers: date,vary,vary,vary,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.24	59081	216.58.206.46	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	996	OUT	POST /ccm/form-data/858128210?gtm=45be5190pfv9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&npa=0&frm=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&ec_mode=a&em=tv.1 HTTP/1.1 Host: google.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:21 UTC	840	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://pcapp.store Date: Fri, 10 Jan 2025 15:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:57:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:57:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.24	59082	142.250.186.66	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	1621	OUT	GET /td/rul/858128210?random=1736522599729&cv=11&fst=1736522599729&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2024 X-Browser-Validation: QFEz3B6Z4AT6PlLzuts1mBxQGCM= X-Browser-Copyright: Copyright 2024 Google LLC. All rights reserved. X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:21 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-Jan-2025 15:38:21 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 15:23:21 UTC	605	IN	Data Raw: 33 65 30 64 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 3e0d<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 34 73 31 32 32 34 31 31 30 30 38 36 2e 31 37 33 36 35 32 32 36 30 30 5c 75 30 30 32 36 69 67 5f 6b 65 79 3d 31 73 4e 48 4d 78 4d 6a 49 30 4d 54 45 77 4d 44 67 32 4c 6a 45 33 4d 7a 59 31 4d 6a 49 32 4d 44 41 21 32 73 5a 36 6a 49 61 51 21 33 73 41 41 70 74 44 56 34 53 37 4a 79 67 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 4a 76 69 67 69 41 21 32 73 5a 36 6a 49 61 51 21 33 73 41 41 70 74 44 56 34 53 37 4a 79 67 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 Data Ascii: ate?ig_name=4s1224110086.1736522600\u0026ig_key=1sNHMxMjI0MTEwMDg2LjE3MzY1MjI2MDA!2sZ6jIaQ!3sAAptDV4S7Jyg","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sJvigiA!2sZ6jIaQ!3sAAptDV4S7Jyg"],"userBiddingSignals"
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 32 33 34 32 31 32 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 37 39 30 34 32 38 33 38 31 32 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 66 62 45 61 4b 4b 2d 78 38 75 4d 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 31 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 Data Ascii: 234212",null,"20788079887",null,null,null,null,null,null,"7904283812"],"adRenderId":"fbEaKK-x8uM","buyerReportingId":"1j7904283812!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820411\u0026cv_id=0\u
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 33 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 33 32 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 37 39 30 34 32 38 33 38 31 32 22 5d 2c 22 61 Data Ascii: 97928\u0026cr_id=688766820432\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j7904283812!4s*2A","metadata":["163766597928","688766820432",null,"20788079887",null,null,null,null,null,null,"7904283812"],"a
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 37 39 30 34 32 38 33 38 31 32 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 76 68 68 79 4f 6d 63 57 65 65 41 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 35 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 Data Ascii: ll,null,null,null,null,null,"7904283812"],"adRenderId":"vhhyOmcWeeA","buyerReportingId":"1j7904283812!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820456\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_H
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 32 36 63 76 5f 69 64 3d 32 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 37 38 36 34 31 31 32 35 38 22 2c 22 36 38 31 32 31 30 34 30 30 32 34 37 22 2c 22 32 22 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 30 62 5f 7a 72 77 39 76 6a 4d 6f 22 2c 22 62 75 79 65 72 52 65 70 6f 72 Data Ascii: 26cv_id=2\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j596093288!4s*2A","metadata":["156786411258","681210400247","2","20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"0b_zrw9vjMo","buyerRepor
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 52 65 6e 64 65 72 49 64 22 3a 22 71 6b 78 7a 71 54 67 50 4a 66 41 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 32 39 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 Data Ascii: RenderId":"qkxzqTgPJfA","buyerReportingId":"1j596093288!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820429\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u00
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 35 30 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 33 6d 4c 55 52 6b 62 67 6f 62 55 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: 6rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j596093288!4s2A","metadata":["163766597928","688766820450",null,"20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"3mLURkbgobU","buyerReportingId":"1j596093288!4s2A"},{"renderUrl":"https:/
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 36 37 38 36 34 31 31 32 35 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 31 31 36 34 33 32 36 30 36 30 5c 75 30 30 32 36 63 76 5f 69 64 3d 31 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 37 38 36 34 31 31 Data Ascii: 93288!4s2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=156786411258\u0026cr_id=681164326060\u0026cv_id=1\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j475816165!4s2A","metadata":["156786411
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 31 36 35 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 31 31 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 49 35 68 70 6a 63 30 6f 68 61 51 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 Data Ascii: 165!4s2A","metadata":["163766597928","688766820411",null,"20788079887",null,null,null,null,null,null,"475816165"],"adRenderId":"I5hpjc0ohaQ","buyerReportingId":"1j475816165!4s2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=16376659

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.24	59083	142.250.186.66	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	1619	OUT	GET /td/rul/858128210?random=1736522599765&cv=11&fst=1736522599765&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2024 X-Browser-Validation: QFEz3B6Z4AT6PlLzuts1mBxQGCM= X-Browser-Copyright: Copyright 2024 Google LLC. All rights reserved. X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:21 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-Jan-2025 15:38:21 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 15:23:21 UTC	605	IN	Data Raw: 33 65 30 64 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 3e0d<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 34 73 31 32 32 34 31 31 30 30 38 36 2e 31 37 33 36 35 32 32 36 30 30 5c 75 30 30 32 36 69 67 5f 6b 65 79 3d 31 73 4e 48 4d 78 4d 6a 49 30 4d 54 45 77 4d 44 67 32 4c 6a 45 33 4d 7a 59 31 4d 6a 49 32 4d 44 41 21 32 73 5a 36 6a 49 61 51 21 33 73 41 41 70 74 44 56 34 53 37 4a 79 67 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 4a 76 69 67 69 41 21 32 73 5a 36 6a 49 61 51 21 33 73 41 41 70 74 44 56 34 53 37 4a 79 67 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 Data Ascii: ate?ig_name=4s1224110086.1736522600\u0026ig_key=1sNHMxMjI0MTEwMDg2LjE3MzY1MjI2MDA!2sZ6jIaQ!3sAAptDV4S7Jyg","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sJvigiA!2sZ6jIaQ!3sAAptDV4S7Jyg"],"userBiddingSignals"
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 34 5a 74 7a 33 6d 78 61 50 2d 51 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 31 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 Data Ascii: ,null,"20788079887",null,null,null,null,null,null,"475816165"],"adRenderId":"4Ztz3mxaP-Q","buyerReportingId":"1j475816165!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820411\u0026cv_id=0\u0026forma
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 38 38 37 36 36 38 32 30 34 33 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 33 32 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 6b 31 4a 2d 39 50 41 4d Data Ascii: 88766820432\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j475816165!4s*2A","metadata":["163766597928","688766820432",null,"20788079887",null,null,null,null,null,null,"475816165"],"adRenderId":"k1J-9PAM
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 69 44 4a 6d 43 54 49 6c 68 4d 41 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 35 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d Data Ascii: "475816165"],"adRenderId":"iDJmCTIlhMA","buyerReportingId":"1j475816165!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820456\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 37 38 36 34 31 31 32 35 38 22 2c 22 36 38 31 32 31 30 34 30 30 32 34 37 22 2c 22 32 22 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 37 39 30 34 32 38 33 38 31 32 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 56 56 66 79 4f 5f 38 6d 76 6a 63 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b Data Ascii: x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j7904283812!4s2A","metadata":["156786411258","681210400247","2","20788079887",null,null,null,null,null,null,"7904283812"],"adRenderId":"VVfyO_8mvjc","buyerReportingId":"1j7904283812!4s2A"},{
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 32 39 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 37 39 30 34 32 38 33 38 31 32 Data Ascii: ","buyerReportingId":"1j7904283812!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820429\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j7904283812
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 35 30 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 37 39 30 34 32 38 33 38 31 32 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 6f 6a 65 38 44 30 51 4e 51 51 63 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 Data Ascii: R_DATA}\u0026seat=2\u0026rp_id=r1j7904283812!4s2A","metadata":["163766597928","688766820450",null,"20788079887",null,null,null,null,null,null,"7904283812"],"adRenderId":"oje8D0QNQQc","buyerReportingId":"1j7904283812!4s2A"},{"renderUrl":"https://tdsf.dou
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 36 37 38 36 34 31 31 32 35 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 31 31 36 34 33 32 36 30 36 30 5c 75 30 30 32 36 63 76 5f 69 64 3d 31 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 37 38 36 34 31 31 Data Ascii: 83812!4s2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=156786411258\u0026cr_id=681164326060\u0026cv_id=1\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j596093288!4s2A","metadata":["156786411
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 31 31 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 4f 44 4d 69 75 35 66 71 48 39 59 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 Data Ascii: 288!4s2A","metadata":["163766597928","688766820411",null,"20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"ODMiu5fqH9Y","buyerReportingId":"1j596093288!4s2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=16376659

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.24	59087	142.251.173.156	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	845	OUT	POST /g/collect?v=2&tid=G-VFQWFX3X1C&cid=1265177916.1736522600&gtm=45je5190v898645365za200zb9103256652&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:21 UTC	842	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://pcapp.store Date: Fri, 10 Jan 2025 15:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.24	59084	142.250.184.226	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	1324	OUT	GET /pagead/viewthroughconversion/858128210/?random=1736522599765&cv=11&fst=1736522599765&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:21 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-Jan-2025 15:38:21 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 15:23:21 UTC	548	IN	Data Raw: 31 32 36 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 1268(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 64 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 71 3f 67 3d 71 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d Data Ascii: ;function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 3b 4a 3c 48 2e 6c 65 6e 67 74 68 3b 4a 2b 2b 29 69 66 28 49 3d 49 5b 48 5b 4a 5d 5d 2c 49 3d 3d 6e 75 6c 6c 29 7b 47 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 47 3d 49 7d 76 61 72 20 4b 3d 47 26 26 47 5b 36 31 30 34 30 31 33 30 31 5d 3b 46 3d 4b 21 3d 6e 75 6c 6c 3f 4b 3a 21 31 3b 76 61 72 20 4c 2c 4d 3d 78 2e 6e 61 76 69 67 61 74 6f 72 3b 4c 3d 4d 3f 4d 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 61 29 7b 72 65 74 75 72 6e 20 46 3f 4c Data Ascii: ror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0;J<H.length;J++)if(I=I[H[J]],I==null){G=null;break a}G=I}var K=G&&G[610401301];F=K!=null?K:!1;var L,M=x.navigator;L=M?M.userAgentData\|\|null:null;function N(a){return F?L
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 56 3d 5b 22 73 73 5f 22 5d 2c 57 3d 73 7c 7c 78 3b 20 56 5b 30 5d 69 6e 20 57 7c 7c 74 79 70 65 6f 66 20 57 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 57 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 56 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 58 3b 56 2e 6c 65 6e 67 74 68 26 26 28 58 3d 56 2e 73 68 69 66 74 28 29 29 3b 29 56 2e 6c 65 6e 67 74 68 7c 7c 55 3d 3d 3d 76 6f 69 64 20 30 3f 57 5b 58 5d 26 26 57 5b 58 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 Data Ascii: rror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}var V=["ss_"],W=s\|\|x; V[0]in W\|\|typeof W.execScript=="undefined"\|\|W.execScript("var "+V[0]);for(var X;V.length&&(X=V.shift());)V.length\|\|U===void 0?W[X]&&W[X]!==Object.pr
2025-01-10 15:23:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-10 15:23:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.24	59089	142.250.186.66	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	1158	OUT	GET /td/ga/rul?tid=G-VFQWFX3X1C&gacid=1265177916.1736522600&gtm=45je5190v898645365za200zb9103256652&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1939852465 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2024 X-Browser-Validation: QFEz3B6Z4AT6PlLzuts1mBxQGCM= X-Browser-Copyright: Copyright 2024 Google LLC. All rights reserved. X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:21 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-Jan-2025 15:38:21 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 15:23:21 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2025-01-10 15:23:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.24	59090	216.58.206.46	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	1023	OUT	POST /ccm/form-data/858128210?gtm=45be5190pfv9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&label=kTaFCIuq0YYZENL-l5kD&npa=0&frm=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&ec_mode=a&em=tv.1 HTTP/1.1 Host: google.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:21 UTC	840	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://pcapp.store Date: Fri, 10 Jan 2025 15:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:57:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:57:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.24	59091	142.250.184.226	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	1378	OUT	GET /pagead/viewthroughconversion/858128210/?random=1736522600079&cv=11&fst=1736522600079&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:21 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-Jan-2025 15:38:21 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 15:23:21 UTC	548	IN	Data Raw: 31 32 63 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12cb(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 64 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 71 3f 67 3d 71 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d Data Ascii: ;function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 3b 4a 3c 48 2e 6c 65 6e 67 74 68 3b 4a 2b 2b 29 69 66 28 49 3d 49 5b 48 5b 4a 5d 5d 2c 49 3d 3d 6e 75 6c 6c 29 7b 47 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 47 3d 49 7d 76 61 72 20 4b 3d 47 26 26 47 5b 36 31 30 34 30 31 33 30 31 5d 3b 46 3d 4b 21 3d 6e 75 6c 6c 3f 4b 3a 21 31 3b 76 61 72 20 4c 2c 4d 3d 78 2e 6e 61 76 69 67 61 74 6f 72 3b 4c 3d 4d 3f 4d 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 61 29 7b 72 65 74 75 72 6e 20 46 3f 4c Data Ascii: ror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0;J<H.length;J++)if(I=I[H[J]],I==null){G=null;break a}G=I}var K=G&&G[610401301];F=K!=null?K:!1;var L,M=x.navigator;L=M?M.userAgentData\|\|null:null;function N(a){return F?L
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 56 3d 5b 22 73 73 5f 22 5d 2c 57 3d 73 7c 7c 78 3b 20 56 5b 30 5d 69 6e 20 57 7c 7c 74 79 70 65 6f 66 20 57 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 57 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 56 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 58 3b 56 2e 6c 65 6e 67 74 68 26 26 28 58 3d 56 2e 73 68 69 66 74 28 29 29 3b 29 56 2e 6c 65 6e 67 74 68 7c 7c 55 3d 3d 3d 76 6f 69 64 20 30 3f 57 5b 58 5d 26 26 57 5b 58 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 Data Ascii: rror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}var V=["ss_"],W=s\|\|x; V[0]in W\|\|typeof W.execScript=="undefined"\|\|W.execScript("var "+V[0]);for(var X;V.length&&(X=V.shift());)V.length\|\|U===void 0?W[X]&&W[X]!==Object.pr
2025-01-10 15:23:21 UTC	101	IN	Data Raw: 37 4c 37 64 51 75 57 4e 50 61 32 79 35 62 5f 4d 39 75 78 59 43 45 58 6a 38 66 6f 4f 73 2d 55 58 76 67 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 32 39 34 33 32 39 31 39 32 37 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: 7L7dQuWNPa2y5b_M9uxYCEXj8foOs-UXvg\x26random\x3d2943291927\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2025-01-10 15:23:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.24	59092	142.250.186.66	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	1673	OUT	GET /td/rul/858128210?random=1736522600079&cv=11&fst=1736522600079&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2024 X-Browser-Validation: QFEz3B6Z4AT6PlLzuts1mBxQGCM= X-Browser-Copyright: Copyright 2024 Google LLC. All rights reserved. X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:21 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 10-Jan-2025 15:38:21 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 15:23:21 UTC	605	IN	Data Raw: 33 65 64 61 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 3eda<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 34 73 31 32 32 34 31 31 30 30 38 36 2e 31 37 33 36 35 32 32 36 30 30 5c 75 30 30 32 36 69 67 5f 6b 65 79 3d 31 73 4e 48 4d 78 4d 6a 49 30 4d 54 45 77 4d 44 67 32 4c 6a 45 33 4d 7a 59 31 4d 6a 49 32 4d 44 41 21 32 73 5a 36 6a 49 61 51 21 33 73 41 41 70 74 44 56 34 53 37 4a 79 67 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 4a 76 69 67 69 41 21 32 73 5a 36 6a 49 61 51 21 33 73 41 41 70 74 44 56 34 53 37 4a 79 67 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 Data Ascii: ate?ig_name=4s1224110086.1736522600\u0026ig_key=1sNHMxMjI0MTEwMDg2LjE3MzY1MjI2MDA!2sZ6jIaQ!3sAAptDV4S7Jyg","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sJvigiA!2sZ6jIaQ!3sAAptDV4S7Jyg"],"userBiddingSignals"
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 34 5a 74 7a 33 6d 78 61 50 2d 51 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 31 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 Data Ascii: ,null,"20788079887",null,null,null,null,null,null,"475816165"],"adRenderId":"4Ztz3mxaP-Q","buyerReportingId":"1j475816165!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820411\u0026cv_id=0\u0026forma
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 38 38 37 36 36 38 32 30 34 33 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 33 32 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 6b 31 4a 2d 39 50 41 4d Data Ascii: 88766820432\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j475816165!4s*2A","metadata":["163766597928","688766820432",null,"20788079887",null,null,null,null,null,null,"475816165"],"adRenderId":"k1J-9PAM
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 69 44 4a 6d 43 54 49 6c 68 4d 41 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 35 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d Data Ascii: "475816165"],"adRenderId":"iDJmCTIlhMA","buyerReportingId":"1j475816165!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820456\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 37 38 36 34 31 31 32 35 38 22 2c 22 36 38 31 32 31 30 34 30 30 32 34 37 22 2c 22 32 22 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 37 39 30 34 32 38 33 38 31 32 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 56 56 66 79 4f 5f 38 6d 76 6a 63 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b Data Ascii: x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j7904283812!4s2A","metadata":["156786411258","681210400247","2","20788079887",null,null,null,null,null,null,"7904283812"],"adRenderId":"VVfyO_8mvjc","buyerReportingId":"1j7904283812!4s2A"},{
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 32 39 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 37 39 30 34 32 38 33 38 31 32 Data Ascii: ","buyerReportingId":"1j7904283812!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820429\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j7904283812
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 35 30 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 37 39 30 34 32 38 33 38 31 32 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 6f 6a 65 38 44 30 51 4e 51 51 63 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 Data Ascii: R_DATA}\u0026seat=2\u0026rp_id=r1j7904283812!4s2A","metadata":["163766597928","688766820450",null,"20788079887",null,null,null,null,null,null,"7904283812"],"adRenderId":"oje8D0QNQQc","buyerReportingId":"1j7904283812!4s2A"},{"renderUrl":"https://tdsf.dou
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 36 37 38 36 34 31 31 32 35 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 31 31 36 34 33 32 36 30 36 30 5c 75 30 30 32 36 63 76 5f 69 64 3d 31 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 37 38 36 34 31 31 Data Ascii: 83812!4s2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=156786411258\u0026cr_id=681164326060\u0026cv_id=1\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j596093288!4s2A","metadata":["156786411
2025-01-10 15:23:21 UTC	1390	IN	Data Raw: 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 31 31 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 4f 44 4d 69 75 35 66 71 48 39 59 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 Data Ascii: 288!4s2A","metadata":["163766597928","688766820411",null,"20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"ODMiu5fqH9Y","buyerReportingId":"1j596093288!4s2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=16376659

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.24	59093	169.150.255.183	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	849	OUT	GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:21 UTC	642	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:23:21 GMT Content-Type: image/svg+xml Content-Length: 7410 Connection: close x-amz-id-2: /vodU20hccwvDsPC1P2wOv+ZNZLNehNXs5/Q77J1SDuOdsxM60ncotf/mfSbF1cG+m0OuA8iFsc= x-amz-request-id: 68RAJW6TAJW806VV Last-Modified: Fri, 15 Nov 2024 12:53:30 GMT ETag: "2cbb3a4955b0c4ee9ade91266aee50a2" x-amz-server-side-encryption: AES256 x-amz-version-id: nE.nBmv7ap5XrFhBdeBX4S.NOoZbBIk2 X-77-NZT: EggBqZb/tgFBDAHDta8GAbeahgkA X-77-NZT-Ray: 15b3c7115fa6ca04693b81670e09c02e X-77-Cache: HIT X-77-Age: 624282 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-10 15:23:21 UTC	7410	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 37 22 20 68 65 69 67 68 74 3d 22 31 30 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 37 20 31 30 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 69 64 3d 22 63 6c 69 63 6b 5f 69 63 6f 6e 22 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 64 5f 35 33 39 5f 32 38 36 29 22 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 22 3e 3c 70 61 74 68 20 69 64 3d 22 56 65 63 74 6f 72 22 20 64 3d 22 4d 37 38 2e 38 35 36 33 20 34 31 2e 36 31 34 31 43 37 38 2e 39 30 34 32 20 34 31 2e 35 36 36 32 20 37 38 2e 39 35 32 31 20 34 31 2e 35 36 36 32 20 37 38 2e 39 35 32 31 20 34 31 2e 35 31 38 33 43 37 39 20 34 Data Ascii: <svg width="107" height="109" viewBox="0 0 107 109" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="click_icon" filter="url(#filter0_d_539_286)"><g id="Group"><path id="Vector" d="M78.8563 41.6141C78.9042 41.5662 78.9521 41.5662 78.9521 41.5183C79 4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.24	59095	167.99.235.203	443	6844	C:\Users\user\Desktop\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:21 UTC	252	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_mini_installer&evt_action=done&_fcid=1736265551741605 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:22 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:21 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.24	59096	142.250.185.228	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:22 UTC	1454	OUT	GET /pagead/1p-user-list/858128210/?random=1736522599729&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dCYrGmA3j1ZBKci55HrLYuFxdZh93cw&random=3818507793&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:22 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 15:23:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.24	59099	34.111.189.158	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:22 UTC	414	OUT	GET /.well-known/protected-auction/v1/public-keys HTTP/1.1 Host: publickeyservice.pa.gcp.privacysandboxservices.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:22 UTC	297	IN	HTTP/1.1 200 OK Server: Google Frontend Via: 1.1 google Content-Length: 514 Date: Tue, 07 Jan 2025 07:16:37 GMT Age: 288405 Content-Type: application/json;charset=iso-8859-1 Cache-Control: public,max-age=604800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 15:23:22 UTC	514	IN	Data Raw: 7b 0a 20 20 22 6b 65 79 73 22 3a 20 5b 7b 0a 20 20 20 20 22 69 64 22 3a 20 22 31 41 38 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 0a 20 20 20 20 22 6b 65 79 22 3a 20 22 6c 48 64 66 66 71 49 47 45 38 4c 49 7a 6d 51 4a 7a 52 70 6d 32 46 34 31 68 76 6d 30 33 4e 47 51 4b 39 34 76 35 72 31 4a 6a 67 34 5c 75 30 30 33 64 22 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 22 69 64 22 3a 20 22 33 41 38 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 0a 20 20 20 20 22 6b 65 79 22 3a 20 22 5a 30 61 48 50 59 63 72 37 42 70 68 77 6d 33 53 70 64 39 7a 51 50 74 5a 31 49 6b 4a 59 42 75 58 57 79 67 66 32 66 2b 48 46 53 6f 5c 75 30 30 33 64 22 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 22 69 64 22 3a 20 22 35 41 38 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 0a 20 20 20 20 22 6b 65 79 22 3a Data Ascii: { "keys": [{ "id": "1A80000000000000", "key": "lHdffqIGE8LIzmQJzRpm2F41hvm03NGQK94v5r1Jjg4\u003d" }, { "id": "3A80000000000000", "key": "Z0aHPYcr7Bphwm3Spd9zQPtZ1IkJYBuXWygf2f+HFSo\u003d" }, { "id": "5A80000000000000", "key":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.24	59097	142.250.185.228	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:22 UTC	1452	OUT	GET /pagead/1p-user-list/858128210/?random=1736522599765&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dbYYVcUdpOA1RyOLC4CtfGhXeYBQlnw&random=1369019749&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:22 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 15:23:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.24	59100	142.250.185.228	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:22 UTC	1506	OUT	GET /pagead/1p-user-list/858128210/?random=1736522600079&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dQuWNPa2y5b_M9uxYCEXj8foOs-UXvg&random=2943291927&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:23 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 15:23:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.24	59101	167.99.235.203	443	6304	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:23 UTC	243	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_installer&evt_action=internal&prev_v=fa.2002 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:23 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:23 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.24	59107	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:23 UTC	550	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:24 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 10 Jan 2025 15:23:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-10 15:23:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.24	59106	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:23 UTC	551	OUT	GET /pixelgif.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:23 UTC	448	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:23 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:23 UTC	106	IN	Data Raw: 35 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 5fPNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.24	59105	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:23 UTC	914	OUT	GET /lp/appstore/img/favicon.ico HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:23 UTC	307	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:23 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:23 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 e3 dc d3 00 e2 dc d2 00 e4 db d4 00 e3 db d1 2d e2 da d1 8a e2 db d2 c9 e3 db d2 e6 e2 da d1 f3 e3 db d2 fd e2 db d2 ff e2 db d2 ff e2 db d2 ff e2 da d2 ff e2 da d2 ff e2 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e2 db d2 ff e3 db d2 ff e2 da d1 ff e2 da d1 ff e2 db d2 ff e2 da d1 fd e3 da d2 f4 e2 da d1 e6 e2 db d1 c9 e2 da d2 89 e2 db d2 2a e0 da d5 00 e3 dc d2 00 e2 dc d2 00 e3 dd d2 00 e1 de d2 02 e3 db d2 58 e3 db d2 d6 e3 db d2 fe e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 fe e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 Data Ascii: ( @ -*X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.24	59108	207.211.211.26	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	619	OUT	GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:24 UTC	642	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:23:24 GMT Content-Type: image/svg+xml Content-Length: 3628 Connection: close x-amz-id-2: WRgK1Io4+MvU/ydU83MrxmIn/9sZ3NO1HJcFvHefwq/1ZdYE78Mq+rqIxLdJVd31VFlMXGDobnI= x-amz-request-id: 72MB1RC30TM522RG Last-Modified: Fri, 15 Nov 2024 12:53:30 GMT ETag: "ee8b3c30df90d2d7459dd6d7f7067c14" x-amz-server-side-encryption: AES256 x-amz-version-id: sg0bjO.xEEZX7iRlW1PhUp5Qu9shLY6K X-77-NZT: EggBz9PTGQFBDAHUZjgRAbevjw4A X-77-NZT-Ray: 43862e24871e77496c3b8167c5aa760e X-77-Cache: HIT X-77-Age: 954287 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-10 15:23:24 UTC	3628	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 32 22 20 68 65 69 67 68 74 3d 22 31 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 32 20 31 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 20 31 32 39 36 22 3e 3c 67 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 20 33 30 32 22 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 64 5f 35 33 39 5f 32 37 39 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 31 32 2e 35 43 31 36 20 31 30 2e 30 31 34 37 20 31 38 2e 30 31 34 37 20 38 20 32 30 2e 35 20 38 48 31 31 31 2e 35 43 31 31 33 2e 39 38 35 20 38 20 31 31 36 20 31 30 2e 30 31 34 37 20 31 31 36 20 31 32 2e 35 Data Ascii: <svg width="132" height="132" viewBox="0 0 132 132" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Group 1296"><g id="Rectangle 302" filter="url(#filter0_d_539_279)"><path d="M16 12.5C16 10.0147 18.0147 8 20.5 8H111.5C113.985 8 116 10.0147 116 12.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.24	59109	207.211.211.26	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	591	OUT	GET /pcapp/images/front_img/logo/logo-dark.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:24 UTC	642	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:23:24 GMT Content-Type: image/svg+xml Content-Length: 3030 Connection: close x-amz-id-2: zpUwCq8YmUo8gLHVyVMkKAjvTPUfh43oUhTR1Q4EcGsu9GIN+pk2euvF2hiqdog1S/Ze4Fxg3NA= x-amz-request-id: B912Q5SFRV3STMG3 Last-Modified: Mon, 04 Nov 2024 16:03:18 GMT ETag: "23df6f3e1d5a1db5a782f3f71fac80ce" x-amz-server-side-encryption: AES256 x-amz-version-id: bkVwmlo6N4ysv9Cbs.Mwmy3K3.pEhNbN X-77-NZT: EggBz9PTGQFBDAGckiEfAbeIUQgA X-77-NZT-Ray: 43862e248919d4496c3b8167017ecd0e X-77-Cache: HIT X-77-Age: 545160 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-10 15:23:24 UTC	3030	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 30 20 39 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 39 30 22 20 72 78 3d 22 32 30 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 32 32 35 37 5f 39 32 29 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 36 39 38 20 32 30 2e 37 31 37 38 43 33 30 2e 34 36 39 38 20 31 36 2e 34 35 35 34 20 32 37 2e 30 31 34 34 20 31 33 2e 30 30 30 31 20 32 32 2e 37 35 32 31 20 31 33 2e 30 30 30 31 43 31 38 2e 34 38 39 37 20 31 33 2e Data Ascii: <svg width="90" height="90" viewBox="0 0 90 90" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="90" height="90" rx="20" fill="url(#paint0_linear_2257_92)"/><path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.24	59111	142.250.181.226	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	1194	OUT	GET /pagead/viewthroughconversion/858128210/?random=1736522599729&cv=11&fst=1736522599729&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-10 15:23:24 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmOdt1MCOoJk_zqprCPrtHvH8idVw1QTRCR48UBDLQLOGd7aVudxR5wiBVr; expires=Sun, 10-Jan-2027 15:23:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 15:23:24 UTC	379	IN	Data Raw: 31 32 37 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 127b(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-10 15:23:24 UTC	1390	IN	Data Raw: 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 6e 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 71 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 Data Ascii: +b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==voi
2025-01-10 15:23:24 UTC	1390	IN	Data Raw: 66 65 74 63 68 28 61 2c 62 29 3b 69 66 28 63 29 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 7d 7d 42 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 20 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 3b 62 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 7d 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 Data Ascii: fetch(a,b);if(c)return c.then(function(){}).catch(function(){}),!0}catch(d){}}B(a);return!0} function C(a){var b=new Image(1,1);b.onload=function(){b.onload=null};b.onerror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0
2025-01-10 15:23:24 UTC	1390	IN	Data Raw: 63 2e 6c 65 6e 67 74 68 3b 66 3d 7b 67 3a 66 2e 67 7d 2c 66 2e 67 2b 2b 29 7b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 54 28 63 5b 66 2e 67 5d 29 29 2c 70 3d 6e 75 6c 6c 3b 72 21 3d 3d 31 26 26 72 21 3d 3d 32 7c 7c 21 28 72 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 67 6f 6f 67 5f 63 6f 6e 76 5f 69 66 72 61 6d 65 22 29 29 7c 7c 72 2e 73 72 63 7c 7c 28 70 3d 72 29 3b 70 7c 7c 28 70 3d 6e 65 77 20 49 6d 61 67 65 2c 64 26 26 64 5b 66 2e 67 5d 26 26 28 70 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 Data Ascii: c.length;f={g:f.g},f.g++){var r=Number(T(c[f.g])),p=null;r!==1&&r!==2\|\|!(r=a.document.getElementById("goog_conv_iframe"))\|\|r.src\|\|(p=r);p\|\|(p=new Image,d&&d[f.g]&&(p.onerror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}v
2025-01-10 15:23:24 UTC	190	IN	Data Raw: 33 44 67 74 61 67 2e 63 6f 6e 66 69 67 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 64 31 31 66 42 44 6d 49 73 79 5f 65 4a 4b 5a 53 6e 57 69 47 53 36 47 70 4d 4a 64 49 49 73 68 79 4e 59 4e 6f 33 6f 66 2d 37 62 68 53 53 4f 4c 33 61 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 38 35 34 33 35 31 37 36 31 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: 3Dgtag.config\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7d11fBDmIsy_eJKZSnWiGS6GpMJdIIshyNYNo3of-7bhSSOL3a\x26random\x3d854351761\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2025-01-10 15:23:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.24	59110	142.250.181.226	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	1192	OUT	GET /pagead/viewthroughconversion/858128210/?random=1736522599765&cv=11&fst=1736522599765&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-10 15:23:24 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkcdFfcqP04bsoY6XyEJTKgAakZ__paqsmrlAm0ehp3Ivs6d0COLm1SD3fn; expires=Sun, 10-Jan-2027 15:23:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 15:23:24 UTC	379	IN	Data Raw: 31 32 37 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 127a(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-10 15:23:24 UTC	1390	IN	Data Raw: 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 6e 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 71 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 Data Ascii: +b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==voi
2025-01-10 15:23:24 UTC	1390	IN	Data Raw: 66 65 74 63 68 28 61 2c 62 29 3b 69 66 28 63 29 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 7d 7d 42 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 20 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 3b 62 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 7d 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 Data Ascii: fetch(a,b);if(c)return c.then(function(){}).catch(function(){}),!0}catch(d){}}B(a);return!0} function C(a){var b=new Image(1,1);b.onload=function(){b.onload=null};b.onerror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0
2025-01-10 15:23:24 UTC	1390	IN	Data Raw: 63 2e 6c 65 6e 67 74 68 3b 66 3d 7b 67 3a 66 2e 67 7d 2c 66 2e 67 2b 2b 29 7b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 54 28 63 5b 66 2e 67 5d 29 29 2c 70 3d 6e 75 6c 6c 3b 72 21 3d 3d 31 26 26 72 21 3d 3d 32 7c 7c 21 28 72 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 67 6f 6f 67 5f 63 6f 6e 76 5f 69 66 72 61 6d 65 22 29 29 7c 7c 72 2e 73 72 63 7c 7c 28 70 3d 72 29 3b 70 7c 7c 28 70 3d 6e 65 77 20 49 6d 61 67 65 2c 64 26 26 64 5b 66 2e 67 5d 26 26 28 70 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 Data Ascii: c.length;f={g:f.g},f.g++){var r=Number(T(c[f.g])),p=null;r!==1&&r!==2\|\|!(r=a.document.getElementById("goog_conv_iframe"))\|\|r.src\|\|(p=r);p\|\|(p=new Image,d&&d[f.g]&&(p.onerror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}v
2025-01-10 15:23:24 UTC	189	IN	Data Raw: 33 44 70 61 67 65 5f 76 69 65 77 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 64 39 37 6e 4e 55 38 46 67 62 34 36 5a 5f 55 71 63 6d 68 56 58 43 48 59 36 6a 34 52 46 72 4b 37 65 4a 55 4a 32 47 59 36 49 4e 58 53 79 33 35 61 6f 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 32 36 35 37 31 39 33 37 34 31 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: 3Dpage_view\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7d97nNU8Fgb46Z_UqcmhVXCHY6j4RFrK7eJUJ2GY6INXSy35ao\x26random\x3d2657193741\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2025-01-10 15:23:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.24	59115	142.250.186.164	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	1222	OUT	GET /pagead/1p-user-list/858128210/?random=1736522599729&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dCYrGmA3j1ZBKci55HrLYuFxdZh93cw&random=3818507793&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:24 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 15:23:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.24	59113	207.211.211.26	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	618	OUT	GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:24 UTC	642	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 15:23:24 GMT Content-Type: image/svg+xml Content-Length: 7410 Connection: close x-amz-id-2: /vodU20hccwvDsPC1P2wOv+ZNZLNehNXs5/Q77J1SDuOdsxM60ncotf/mfSbF1cG+m0OuA8iFsc= x-amz-request-id: 68RAJW6TAJW806VV Last-Modified: Fri, 15 Nov 2024 12:53:30 GMT ETag: "2cbb3a4955b0c4ee9ade91266aee50a2" x-amz-server-side-encryption: AES256 x-amz-version-id: nE.nBmv7ap5XrFhBdeBX4S.NOoZbBIk2 X-77-NZT: EggBz9PTGQFBDAHDta8GAbedhgkA X-77-NZT-Ray: 43862e2489197f4a6c3b81677d6ada11 X-77-Cache: HIT X-77-Age: 624285 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-10 15:23:24 UTC	7410	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 37 22 20 68 65 69 67 68 74 3d 22 31 30 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 37 20 31 30 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 69 64 3d 22 63 6c 69 63 6b 5f 69 63 6f 6e 22 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 64 5f 35 33 39 5f 32 38 36 29 22 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 22 3e 3c 70 61 74 68 20 69 64 3d 22 56 65 63 74 6f 72 22 20 64 3d 22 4d 37 38 2e 38 35 36 33 20 34 31 2e 36 31 34 31 43 37 38 2e 39 30 34 32 20 34 31 2e 35 36 36 32 20 37 38 2e 39 35 32 31 20 34 31 2e 35 36 36 32 20 37 38 2e 39 35 32 31 20 34 31 2e 35 31 38 33 43 37 39 20 34 Data Ascii: <svg width="107" height="109" viewBox="0 0 107 109" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="click_icon" filter="url(#filter0_d_539_286)"><g id="Group"><path id="Vector" d="M78.8563 41.6141C78.9042 41.5662 78.9521 41.5662 78.9521 41.5183C79 4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.24	59112	142.250.181.226	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	1246	OUT	GET /pagead/viewthroughconversion/858128210/?random=1736522600079&cv=11&fst=1736522600079&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-10 15:23:24 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkTM06uQkxga7Lu8PMHTsCEEToJzpdMhgeXskfmQp-wEqRvlLDnsP8kYFbx; expires=Sun, 10-Jan-2027 15:23:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-10 15:23:24 UTC	379	IN	Data Raw: 31 32 64 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12dc(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-10 15:23:24 UTC	1390	IN	Data Raw: 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 6e 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 71 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 Data Ascii: +b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==voi
2025-01-10 15:23:24 UTC	1390	IN	Data Raw: 66 65 74 63 68 28 61 2c 62 29 3b 69 66 28 63 29 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 7d 7d 42 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 20 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 3b 62 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 7d 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 Data Ascii: fetch(a,b);if(c)return c.then(function(){}).catch(function(){}),!0}catch(d){}}B(a);return!0} function C(a){var b=new Image(1,1);b.onload=function(){b.onload=null};b.onerror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0
2025-01-10 15:23:24 UTC	1390	IN	Data Raw: 63 2e 6c 65 6e 67 74 68 3b 66 3d 7b 67 3a 66 2e 67 7d 2c 66 2e 67 2b 2b 29 7b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 54 28 63 5b 66 2e 67 5d 29 29 2c 70 3d 6e 75 6c 6c 3b 72 21 3d 3d 31 26 26 72 21 3d 3d 32 7c 7c 21 28 72 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 67 6f 6f 67 5f 63 6f 6e 76 5f 69 66 72 61 6d 65 22 29 29 7c 7c 72 2e 73 72 63 7c 7c 28 70 3d 72 29 3b 70 7c 7c 28 70 3d 6e 65 77 20 49 6d 61 67 65 2c 64 26 26 64 5b 66 2e 67 5d 26 26 28 70 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 Data Ascii: c.length;f={g:f.g},f.g++){var r=Number(T(c[f.g])),p=null;r!==1&&r!==2\|\|!(r=a.document.getElementById("goog_conv_iframe"))\|\|r.src\|\|(p=r);p\|\|(p=new Image,d&&d[f.g]&&(p.onerror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}v
2025-01-10 15:23:24 UTC	287	IN	Data Raw: 62 5c 78 33 64 30 5c 78 32 36 75 61 6d 5c 78 33 64 5c 78 32 36 75 61 70 5c 78 33 64 57 69 6e 64 6f 77 73 5c 78 32 36 75 61 70 76 5c 78 33 64 31 35 2e 30 2e 30 5c 78 32 36 75 61 77 5c 78 33 64 30 5c 78 32 36 66 6c 65 64 67 65 5c 78 33 64 31 5c 78 32 36 64 61 74 61 5c 78 33 64 65 76 65 6e 74 25 33 44 63 6f 6e 76 65 72 73 69 6f 6e 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 64 62 37 33 34 2d 37 6d 45 76 48 6b 7a 6a 31 32 62 58 66 52 62 59 68 6b 39 69 41 51 61 4e 34 45 44 61 63 57 77 56 66 49 66 36 34 68 56 63 7a 6b 6a 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 31 37 36 36 31 32 34 34 35 5c 78 32 36 72 6d 74 5f 74 6c 64 Data Ascii: b\x3d0\x26uam\x3d\x26uap\x3dWindows\x26uapv\x3d15.0.0\x26uaw\x3d0\x26fledge\x3d1\x26data\x3devent%3Dconversion\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7db734-7mEvHkzj12bXfRbYhk9iAQaN4EDacWwVfIf64hVczkj\x26random\x3d176612445\x26rmt_tld
2025-01-10 15:23:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.24	59116	142.250.186.164	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	1220	OUT	GET /pagead/1p-user-list/858128210/?random=1736522599765&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dbYYVcUdpOA1RyOLC4CtfGhXeYBQlnw&random=1369019749&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:24 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 15:23:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.24	59117	142.250.186.164	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	1274	OUT	GET /pagead/1p-user-list/858128210/?random=1736522600079&cv=11&fst=1736521200000&bg=ffffff&guid=ON&async=1&gtm=45be5190v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DB85E4D56-FE7F-05B2-0505-26A7EDB43680%26_fcid%3D1736265551741605%26_winver%3D22631%26version%3Dfa.2002&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1224110086.1736522600&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B131.0.6778.109%7CChromium%3B131.0.6778.109%7CNot_A%2520Brand%3B24.0.0.0&uamb=0&uam=&uap=Windows&uapv=15.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dQuWNPa2y5b_M9uxYCEXj8foOs-UXvg&random=2943291927&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlqHLAQiFoM0BCJzSzgEIjtPOARj0yc0B Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:24 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 10 Jan 2025 15:23:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 15:23:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.24	59118	167.99.235.203	443	6304	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	236	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_installer&evt_action=start&permision= HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:24 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:24 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.24	59119	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	550	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:24 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 10 Jan 2025 15:23:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-10 15:23:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.24	59121	167.99.235.203	443	6304	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:24 UTC	274	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_installer&evt_action=installing&e=03000200-0400-0500-0006-000700080009&u=74 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:25 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:24 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.24	59125	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:25 UTC	930	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:25 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 42 38 35 45 34 44 35 36 2d 46 45 37 46 2d 30 35 42 32 2d 30 35 30 35 2d 32 36 41 37 45 44 42 34 33 36 38 30 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"B85E4D56-FE7F-05B2-0505-26A7EDB43680"}}
2025-01-10 15:23:25 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:25 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:25 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 6e 6f 20 69 6e 66 6f 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"no info"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.24	59126	167.99.235.203	443	6304	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:25 UTC	254	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_installer&evt_action=localmac&addon[]=80-C1-6E-AA-B5-C8 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:25 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:25 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.24	59128	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:26 UTC	566	OUT	GET /lp/appstore/img/favicon.ico HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:26 UTC	307	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:26 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:26 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 e3 dc d3 00 e2 dc d2 00 e4 db d4 00 e3 db d1 2d e2 da d1 8a e2 db d2 c9 e3 db d2 e6 e2 da d1 f3 e3 db d2 fd e2 db d2 ff e2 db d2 ff e2 db d2 ff e2 da d2 ff e2 da d2 ff e2 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e2 db d2 ff e3 db d2 ff e2 da d1 ff e2 da d1 ff e2 db d2 ff e2 da d1 fd e3 da d2 f4 e2 da d1 e6 e2 db d1 c9 e2 da d2 89 e2 db d2 2a e0 da d5 00 e3 dc d2 00 e2 dc d2 00 e3 dd d2 00 e1 de d2 02 e3 db d2 58 e3 db d2 d6 e3 db d2 fe e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 fe e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 Data Ascii: ( @ -*X

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.24	59130	23.55.235.242	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:26 UTC	436	OUT	OPTIONS /api/report?cat=bingth&ndcParam=QUZE HTTP/1.1 Host: aefd.nelreports.net Connection: keep-alive Origin: https://th.bing.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36 Edg/100.0.1185.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 15:23:26 UTC	444	IN	HTTP/1.1 200 OK Content-Length: 0 Server: Kestrel Date: Fri, 10 Jan 2025 15:23:26 GMT Alt-Svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" Connection: close PMUSER_FORMAT_QS: X-CDN-TraceId: 0.eeeb3717.1736522606.3b0aa50 Access-Control-Allow-Headers: * Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.24	59131	167.99.235.203	443	6304	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:28 UTC	284	OUT	POST /inst_cpg.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&src=pcapp_full HTTP/1.1 Filename: tempPOSTData Content-Type: application/json User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Content-Length: 2258 Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:28 UTC	2258	OUT	Data Raw: 7b 22 73 79 73 74 65 6d 5f 73 74 61 74 73 22 3a 7b 22 6f 73 5f 6e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2b 57 69 6e 64 6f 77 73 2b 31 31 2b 50 72 6f 22 2c 22 6f 73 5f 69 6e 73 74 61 6c 6c 64 61 74 65 22 3a 22 32 30 32 34 31 32 30 39 31 39 31 30 31 39 25 32 45 30 30 30 30 30 30 25 32 42 30 36 30 22 2c 22 6f 73 5f 70 72 6f 63 65 73 73 65 73 22 3a 22 31 31 35 22 2c 22 6f 73 5f 61 72 63 68 69 74 65 63 74 75 72 65 22 3a 22 36 34 2d 62 69 74 22 2c 22 6f 73 5f 76 69 72 74 6d 65 6d 22 3a 22 38 33 38 37 36 33 36 22 2c 22 6f 73 5f 6d 65 6d 22 3a 22 34 31 39 33 33 33 32 22 2c 22 63 70 75 5f 6e 61 6d 65 22 3a 22 49 6e 74 65 6c 25 32 38 52 25 32 39 2b 43 6f 72 65 25 32 38 54 4d 25 32 39 32 2b 43 50 55 2b 36 36 30 30 2b 25 34 30 2b 32 25 32 45 34 30 2b 47 48 7a Data Ascii: {"system_stats":{"os_name":"Microsoft+Windows+11+Pro","os_installdate":"20241209191019%2E000000%2B060","os_processes":"115","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz
2025-01-10 15:23:29 UTC	509	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:29 UTC	84	IN	Data Raw: 34 39 0d 0a 7b 22 63 70 67 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 6e 73 74 5f 65 78 63 6c 22 3a 6e 75 6c 6c 2c 22 69 6e 73 74 5f 61 64 64 6f 6e 22 3a 6e 75 6c 6c 2c 22 69 6e 73 74 5f 61 64 76 61 6e 63 65 64 22 3a 6e 75 6c 6c 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 49{"cpg":"default","inst_excl":null,"inst_addon":null,"inst_advanced":null}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.24	59129	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:29 UTC	550	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:30 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 10 Jan 2025 15:23:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-10 15:23:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.24	59132	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:30 UTC	930	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:30 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 42 38 35 45 34 44 35 36 2d 46 45 37 46 2d 30 35 42 32 2d 30 35 30 35 2d 32 36 41 37 45 44 42 34 33 36 38 30 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"B85E4D56-FE7F-05B2-0505-26A7EDB43680"}}
2025-01-10 15:23:30 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:30 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:30 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 6e 6f 20 69 6e 66 6f 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"no info"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.24	59133	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:31 UTC	550	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:31 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 10 Jan 2025 15:23:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-10 15:23:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.24	59134	167.99.235.203	443	6304	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:32 UTC	237	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&inst_parent=&evt_src=fa_installer&evt_action=done HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-10 15:23:32 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:32 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.24	59135	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:32 UTC	698	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":0,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736526543&nocache=20423 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:33 UTC	476	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: RefreshHit from cloudfront Via: 1.1 392cb865edfd76152c5ac655614b2f60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: a2M9PaC1xju1SqSUwfe12dHwvT_g5syt-jrJKl3RXvZrCmFr0Yop_A==
2025-01-10 15:23:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.24	59136	167.99.235.203	443	6700	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:32 UTC	236	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_product&evt_action=channel&id=-3&eng_time=1736526543481&nocache=5217578 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-10 15:23:33 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:33 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.24	59137	167.99.235.203	443	6700	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:33 UTC	149	OUT	GET /api/pcapp_engine.php?a=config&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002 HTTP/1.1 Host: pcapp.store Cache-Control: no-cache
2025-01-10 15:23:33 UTC	501	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:33 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:33 UTC	2737	IN	Data Raw: 61 61 35 0d 0a 7b 22 73 74 61 74 69 63 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 6d 65 6e 75 5f 73 74 6f 72 65 22 2c 22 62 65 68 61 76 69 6f 72 5f 74 79 70 65 22 3a 22 70 72 69 6d 61 72 79 22 2c 22 69 6e 69 74 69 61 6c 5f 75 72 69 22 3a 22 5c 2f 61 70 70 73 74 6f 72 65 2d 6d 65 6e 75 5c 2f 22 2c 22 61 75 74 6f 4f 70 65 6e 22 3a 74 72 75 65 2c 22 68 69 64 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 6e 61 6d 65 22 3a 22 6d 65 6e 75 5f 73 65 61 72 63 68 22 2c 22 62 65 68 61 76 69 6f 72 5f 74 79 70 65 22 3a 22 70 72 69 6d 61 72 79 22 2c 22 69 6e 69 74 69 61 6c 5f 75 72 69 22 3a 22 5c 2f 73 65 61 72 63 68 2d 6d 65 6e 75 5c 2f 3f 61 3d 67 65 74 54 65 6d 70 6c 61 74 65 26 70 5b 74 6d 70 6c 54 79 70 65 5d 3d 73 65 61 72 63 68 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 6f 66 66 65 72 Data Ascii: aa5{"static":[{"name":"menu_store","behavior_type":"primary","initial_uri":"\/appstore-menu\/","autoOpen":true,"hide":false},{"name":"menu_search","behavior_type":"primary","initial_uri":"\/search-menu\/?a=getTemplate&p[tmplType]=search"},{"name":"offer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.24	59138	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:34 UTC	698	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":1,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736529061&nocache=24538 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:34 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 24df21f8156a0df29febdf6c3e09e32c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: -yS_S-DwqemS0r9S_7BKAd3rZ0aKb73Vutq_RlhbhzHlxB5FHTYsAg== Age: 1
2025-01-10 15:23:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.24	59141	167.99.235.203	443	6700	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:34 UTC	262	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_product&evt_action=started&prnt=nsc5D64.tmp&sys_lang=en-US&eng_time=1736526543517&nocache=5219859 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-10 15:23:34 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:34 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.24	59143	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:35 UTC	930	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:35 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 42 38 35 45 34 44 35 36 2d 46 45 37 46 2d 30 35 42 32 2d 30 35 30 35 2d 32 36 41 37 45 44 42 34 33 36 38 30 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"B85E4D56-FE7F-05B2-0505-26A7EDB43680"}}
2025-01-10 15:23:35 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:35 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:35 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 6e 6f 20 69 6e 66 6f 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"no info"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.24	59144	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:36 UTC	698	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":2,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736530981&nocache=27676 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:36 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 ed5042a23d5905bfac08effe99f4b1ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: XKnHgVnhbRBJ7ePp0G1NItC0bUZU8rE-ZPPzClsyg5HeAhhvzDIoew== Age: 3
2025-01-10 15:23:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.24	59147	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:36 UTC	550	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:36 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 10 Jan 2025 15:23:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-10 15:23:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.24	59155	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:37 UTC	698	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":3,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736533019&nocache=31007 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:37 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 0140ca34c2d577c2578595f0c9e0050e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: d69zNhBUHwYyHDC7uWyZQ7EKyXQPgaFeBiwVT-EZowM1fH_xZoMCpA== Age: 4
2025-01-10 15:23:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.24	59158	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:38 UTC	697	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":4,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736535058&nocache=1570 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:39 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 8c1c3a8ed856f5c19ce3b4158bff94a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: roWXQN8JbqsQiESWyjkyjP4gFYVGEMmkrAB1cLcplpNH0AXmy_LYmQ== Age: 6
2025-01-10 15:23:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.24	59157	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:38 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 31 36 0d 0a 4d 53 2d 43 56 3a 20 64 46 4d 79 71 4f 35 47 51 45 4b 2b 6a 45 6c 57 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 66 33 65 63 38 33 66 32 39 36 30 37 62 36 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 316MS-CV: dFMyqO5GQEK+jElW.1Context: df3ec83f29607b65
2025-01-10 15:23:38 UTC	260	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 32 32 36 33 31 2e 34 31 36 39 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 30 30 31 38 30 30 31 32 41 38 34 34 37 39 41 41 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.22631.4169</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>00180012A84479AA</deviceName><followRetry>true</followRetry></agent></con
2025-01-10 15:23:38 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 64 46 4d 79 71 4f 35 47 51 45 4b 2b 6a 45 6c 57 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 66 33 65 63 38 33 66 32 39 36 30 37 62 36 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 53 76 57 2b 6c 34 6b 31 4c 4c 61 6b 59 45 42 52 71 67 2f 77 49 77 2f 34 61 54 74 66 75 68 67 30 4a 48 55 35 37 48 54 6a 57 44 4c 76 4e 55 74 4b 5a 41 68 59 48 6c 39 65 6f 38 4a 42 67 48 2b 65 63 66 71 2f 2b 72 41 2f 33 73 50 67 2f 7a 65 46 66 46 78 6c 6c 38 58 61 78 2b 76 50 37 77 55 6f 34 66 79 6a 4b 6b 65 43 5a 43 71 63 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: dFMyqO5GQEK+jElW.2Context: df3ec83f29607b65<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARSvW+l4k1LLakYEBRqg/wIw/4aTtfuhg0JHU57HTjWDLvNUtKZAhYHl9eo8JBgH+ecfq/+rA/3sPg/zeFfFxll8Xax+vP7wUo4fyjKkeCZCqc
2025-01-10 15:23:38 UTC	224	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 39 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 64 46 4d 79 71 4f 35 47 51 45 4b 2b 6a 45 6c 57 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 66 33 65 63 38 33 66 32 39 36 30 37 62 36 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044479 197MS-CV: dFMyqO5GQEK+jElW.3Context: df3ec83f29607b65<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-10 15:23:39 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-10 15:23:39 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 38 43 53 48 69 35 75 4b 41 55 4f 56 74 54 68 2b 79 70 6f 67 46 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 8CSHi5uKAUOVtTh+ypogFg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.24	59160	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:40 UTC	697	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":5,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736537096&nocache=4900 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:40 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 e240913a5e90e18bd637baa6899f2280.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: mmmLV9Y2z71X-3psx16OMCdrkvENoO3Ua5EFxuNrZ0jTO1gDOvShyg== Age: 7
2025-01-10 15:23:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.24	59162	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:40 UTC	930	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:40 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 42 38 35 45 34 44 35 36 2d 46 45 37 46 2d 30 35 42 32 2d 30 35 30 35 2d 32 36 41 37 45 44 42 34 33 36 38 30 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"B85E4D56-FE7F-05B2-0505-26A7EDB43680"}}
2025-01-10 15:23:40 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:40 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:40 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 6e 6f 20 69 6e 66 6f 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"no info"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.24	59165	172.64.41.3	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:40 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-10 15:23:40 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2025-01-10 15:23:41 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Fri, 10 Jan 2025 15:23:41 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8ffdab6d6c56430d-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:23:41 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 13 00 04 8e fb 28 e3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.24	59163	172.64.41.3	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:40 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-10 15:23:40 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2025-01-10 15:23:41 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Fri, 10 Jan 2025 15:23:41 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8ffdab6d9929efa9-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:23:41 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 2a 00 04 8e fa 48 63 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom*Hc)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.24	59164	172.64.41.3	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:40 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-10 15:23:40 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2025-01-10 15:23:41 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Fri, 10 Jan 2025 15:23:41 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8ffdab6d990143e0-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 15:23:41 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 09 00 04 8e fb 28 e3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.24	59167	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:41 UTC	550	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:41 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 10 Jan 2025 15:23:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-10 15:23:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.24	59166	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:41 UTC	697	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":6,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736539015&nocache=8035 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:41 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 3f257ae011e1a2ab12346ea11fad9a18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: Re1Qj9FTEDJC0eXq_lxt5Gni9HMDeDDTsYeALz1eQnBY0nQCi3buvA== Age: 8
2025-01-10 15:23:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.24	59151	167.99.235.203	443	6700	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:42 UTC	272	OUT	GET /pixel.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=fa_product&evt_action=webview_error&reason=failed_to_create_thread_hook&eng_time=1736526545358&nocache=5221828 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-10 15:23:42 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:42 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.24	59171	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:42 UTC	698	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":7,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736540934&nocache=11170 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:43 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 ed5042a23d5905bfac08effe99f4b1ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: xrY5OSHL-UD0dt_RhpJU5pgf52M4gADcbYxGg6FqXN2DFKF-5UEqNg== Age: 9
2025-01-10 15:23:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.24	59174	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:44 UTC	698	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":8,"rid":"20250110102331.45217218","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736543212&nocache=14893 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:44 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 20ce720be9c31a6a95223700ba5f8724.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: gLWTgOaK7UIugnLWITEuEep3J6Dl-o-6O1V995jcf2eh6btCJVXTpg== Age: 11
2025-01-10 15:23:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.24	59176	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:45 UTC	930	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:45 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 42 38 35 45 34 44 35 36 2d 46 45 37 46 2d 30 35 42 32 2d 30 35 30 35 2d 32 36 41 37 45 44 42 34 33 36 38 30 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"B85E4D56-FE7F-05B2-0505-26A7EDB43680"}}
2025-01-10 15:23:45 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:45 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:45 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 6e 6f 20 69 6e 66 6f 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"no info"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.24	59175	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:45 UTC	698	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":9,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736545131&nocache=18028 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:45 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 90cfd2dca03ef57cde2166b6abbd53ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: moGeTyxHABzjESJYd9OHQH-EQp1-eHXIGYG38-aNShPag9Vg4sb7Sg== Age: 12
2025-01-10 15:23:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.24	59177	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:46 UTC	550	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:46 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 10 Jan 2025 15:23:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-10 15:23:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.24	59179	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:46 UTC	699	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":10,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736547170&nocache=21359 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:47 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 8a7cd2920ac4cbceb2a8f9a130562a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: IwHyNTPdVwJ5F0FgcQwuVbBw17IDMySxxmzZhUGhPEqodMHV48zm5g== Age: 14
2025-01-10 15:23:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.24	59180	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:48 UTC	699	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":11,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736549088&nocache=24494 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:48 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 b4c8f37704271e217979234a38712c42.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: BGMJXaw-ehH-xfzSnIXmfxxiTcOsl9wFCa77cWPOiXhopdjwYrgTtA== Age: 15
2025-01-10 15:23:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.24	59181	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:49 UTC	699	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":12,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736551007&nocache=27629 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:49 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 7f26f4279546775ace8410d89a15a960.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 9hF60Dih4mN9ExTDKi7xWqiqd98l4hI90e7QkhGbW0BB3HGAUC_byA== Age: 16
2025-01-10 15:23:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.24	59182	159.203.177.96	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:50 UTC	930	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24" Content-Type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&_fcid=1736265551741605&_winver=22631&version=fa.2002 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:50 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 42 38 35 45 34 44 35 36 2d 46 45 37 46 2d 30 35 42 32 2d 30 35 30 35 2d 32 36 41 37 45 44 42 34 33 36 38 30 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"B85E4D56-FE7F-05B2-0505-26A7EDB43680"}}
2025-01-10 15:23:50 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 10 Jan 2025 15:23:50 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-10 15:23:50 UTC	41	IN	Data Raw: 31 65 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 64 6f 6e 65 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 1e{"state":"ok","result":"done"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.24	59183	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:51 UTC	699	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":13,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736553286&nocache=31352 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:51 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 3f257ae011e1a2ab12346ea11fad9a18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 6vVioPSXpRO_-k7g3nZXe8Sm4Vu0Y9d1RSpu0vEq1xZIJmUURUYxMg== Age: 18
2025-01-10 15:23:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.24	59184	159.223.126.41	443	7004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:51 UTC	550	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1736265551741605; guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680; _gcl_au=1.1.1224110086.1736522600; _ga=GA1.1.1265177916.1736522600; _ga_VFQWFX3X1C=GS1.1.1736522599.1.0.1736522599.60.0.0
2025-01-10 15:23:51 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Fri, 10 Jan 2025 15:23:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-10 15:23:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.24	59185	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:52 UTC	698	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":14,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736555205&nocache=1719 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:52 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 20ce720be9c31a6a95223700ba5f8724.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: TEZL-ZsBRo_hAmmfVbtEK_Z4rNc_Cs_lFLHO80pGIzm8YF66SZqAvg== Age: 19
2025-01-10 15:23:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.24	59186	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:54 UTC	698	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":15,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736557603&nocache=5641 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:54 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 8c1c3a8ed856f5c19ce3b4158bff94a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 048R0k3_SkBIAxnxw4gzg6PhISjOwJ-M0XSZFZF395fp2pJXKIzTqA== Age: 21
2025-01-10 15:23:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.24	59187	18.173.205.91	443	5460	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:23:55 UTC	698	OUT	GET /p.gif?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&version=fa.2002&evt_src=watch_dog&evt_action=signal_event&data={"counter":16,"rid":"20250110102331.45217218","isPCAppRunning":0,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1736559522&nocache=8776 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-10 15:23:55 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 10 Jan 2025 15:23:34 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 8c1c3a8ed856f5c19ce3b4158bff94a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: KGVpp0XKOE7OFJUORMKWCN66Zzn-ROTDYh9BoPs0d-9Oxw57JtHjmQ== Age: 22
2025-01-10 15:23:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.24	59188	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 15:24:01 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 31 36 0d 0a 4d 53 2d 43 56 3a 20 4a 6f 2f 48 78 52 74 77 37 6b 69 71 4b 62 64 34 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 37 62 61 37 61 32 36 66 35 31 64 39 30 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 316MS-CV: Jo/HxRtw7kiqKbd4.1Context: f27ba7a26f51d90b
2025-01-10 15:24:01 UTC	260	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 32 32 36 33 31 2e 34 31 36 39 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 30 30 31 38 30 30 31 32 41 38 34 34 37 39 41 41 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.22631.4169</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>00180012A84479AA</deviceName><followRetry>true</followRetry></agent></con
2025-01-10 15:24:01 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4a 6f 2f 48 78 52 74 77 37 6b 69 71 4b 62 64 34 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 37 62 61 37 61 32 36 66 35 31 64 39 30 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 53 76 57 2b 6c 34 6b 31 4c 4c 61 6b 59 45 42 52 71 67 2f 77 49 77 2f 34 61 54 74 66 75 68 67 30 4a 48 55 35 37 48 54 6a 57 44 4c 76 4e 55 74 4b 5a 41 68 59 48 6c 39 65 6f 38 4a 42 67 48 2b 65 63 66 71 2f 2b 72 41 2f 33 73 50 67 2f 7a 65 46 66 46 78 6c 6c 38 58 61 78 2b 76 50 37 77 55 6f 34 66 79 6a 4b 6b 65 43 5a 43 71 63 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Jo/HxRtw7kiqKbd4.2Context: f27ba7a26f51d90b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARSvW+l4k1LLakYEBRqg/wIw/4aTtfuhg0JHU57HTjWDLvNUtKZAhYHl9eo8JBgH+ecfq/+rA/3sPg/zeFfFxll8Xax+vP7wUo4fyjKkeCZCqc
2025-01-10 15:24:01 UTC	224	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 31 30 34 34 34 37 39 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4a 6f 2f 48 78 52 74 77 37 6b 69 71 4b 62 64 34 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 32 37 62 61 37 61 32 36 66 35 31 64 39 30 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 1044479 197MS-CV: Jo/HxRtw7kiqKbd4.3Context: f27ba7a26f51d90b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-10 15:24:01 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-10 15:24:01 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 43 52 6d 41 35 71 44 4b 67 55 2b 68 59 56 31 7a 73 4f 69 5a 4c 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: CRmA5qDKgU+hYV1zsOiZLA.0Payload parsing failed.

Target ID:	1
Start time:	10:21:48
Start date:	10/01/2025
Path:	C:\Users\user\Desktop\Setup.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Setup.exe"
Imagebase:	0x400000
File size:	205'424 bytes
MD5 hash:	9EF1C049702436C2597449BFB966130E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	10:23:14
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pcapp.store/installing.php?guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680&winver=22631&version=fa.2002&nocache=20250110102314.55&_fcid=1736265551741605
Imagebase:	0x7ff75e800000
File size:	3'001'952 bytes
MD5 hash:	290DF23002E9B52249B5549F0C668A86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	10:23:15
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=2160,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=2184 /prefetch:11
Imagebase:	0x7ff75e800000
File size:	3'001'952 bytes
MD5 hash:	290DF23002E9B52249B5549F0C668A86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	10:23:19
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations=is-enterprise-managed=no --field-trial-handle=5452,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=5476 /prefetch:12
Imagebase:	0x7ff75e800000
File size:	3'001'952 bytes
MD5 hash:	290DF23002E9B52249B5549F0C668A86
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	10:23:19
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=5428,i,13028691572385289380,3673408400411001046,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20241208-180523.718000 --mojo-platform-channel-handle=5624 /prefetch:14
Imagebase:	0x7ff75e800000
File size:	3'001'952 bytes
MD5 hash:	290DF23002E9B52249B5549F0C668A86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	10:23:20
Start date:	10/01/2025
Path:	C:\Users\user\AppData\Local\Temp\nsc5D64.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\nsc5D64.tmp" /internal 1736265551741605 /force
Imagebase:	0x400000
File size:	1'334'568 bytes
MD5 hash:	FFF2189ADE42336854F53C8D2BD5A0E5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 35%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	10:23:30
Start date:	10/01/2025
Path:	C:\Users\user\PCAppStore\PcAppStore.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\PCAppStore\PcAppStore.exe" /init default
Imagebase:	0x7ff699ea0000
File size:	3'528'024 bytes
MD5 hash:	A4EA4FFE8FF33279682195AFC6CEBC70
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 17%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	10:23:31
Start date:	10/01/2025
Path:	C:\Users\user\PCAppStore\Watchdog.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\PCAppStore\Watchdog.exe" /guid=B85E4D56-FE7F-05B2-0505-26A7EDB43680 /rid=20250110102331.45217218 /ver=fa.2002
Imagebase:	0x7ff6d9ed0000
File size:	293'720 bytes
MD5 hash:	FCD21F8A189F9427083D19AD84FE7FF9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 17%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	23
Start time:	10:23:35
Start date:	10/01/2025
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 6700 -s 2692
Imagebase:	0x7ff7b7430000
File size:	628'208 bytes
MD5 hash:	5A849C27C4796C1A7C22C572D8EAF95D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use bootkits to persist on systems. Bootkits reside at a layer below the operating system and may make it difficult to perform full remediation unless an organization suspects one was used and can act accordingly.
Tactics:	Defense Evasion, Persistence
Data Sources:	Drive: Drive Modification
Platforms:	Linux, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Setup.exe

Overview

General Information

Detection

Compliance

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Privilege Escalation

Phishing

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_PcAppStore.exe_378681cfe1f53b5d7ed7d144ae7f543e1948fd6e_1182b65f_e9c27188-2e2e-42e0-8c23-e78c8a173432\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER.5b4f1fc2-e0d2-4ad2-af0f-0d7f9db3811e.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER.958ec57b-5132-406d-aa6f-8632c792d8b0.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER.d79ee133-9c99-4625-9250-1e3838bccce4.tmp.xml

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2OIDBQCM\p[1].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2OIDBQCM\p[2].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2OIDBQCM\p[3].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2OIDBQCM\p[4].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4TJ1LROY\p[1].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4TJ1LROY\p[2].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4TJ1LROY\p[3].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4TJ1LROY\p[4].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KA259YPD\p[1].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KA259YPD\p[2].gif

Windows Analysis Report
Setup.exe